CVE-2015-1815

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows...

10.0 HighPublic exploitFix available

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.

Exploit likelihood

16.5%Down 1.9 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.

Record: CVE-2015-1815
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-77
Updated: 2026-11-02

CVE List No score

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.

Record: CVE-2015-1815
Updated: 2026-11-02

EUVDEUVD-2015-1937 No score

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.

Record: EUVD-2015-1937
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6hj4-3cj5-hqm9 No score

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows...

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.

Record: GHSA-6hj4-3cj5-hqm9
Weakness: CWE-77
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`setroubleshoot` Red Hat:enterprise_linux:5::client	before 0:2.0.5-7.el5_11	0:2.0.5-7.el5_11
`setroubleshoot-server` Red Hat:enterprise_linux:5::client	before 0:2.0.5-7.el5_11	0:2.0.5-7.el5_11
`setroubleshoot` Red Hat:enterprise_linux:5::server	before 0:2.0.5-7.el5_11	0:2.0.5-7.el5_11
`setroubleshoot-server` Red Hat:enterprise_linux:5::server	before 0:2.0.5-7.el5_11	0:2.0.5-7.el5_11
`setroubleshoot` Red Hat:enterprise_linux:6::client	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-debuginfo` Red Hat:enterprise_linux:6::client	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-server` Red Hat:enterprise_linux:6::client	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-doc` Red Hat:enterprise_linux:6::client	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot` Red Hat:enterprise_linux:6::server	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-debuginfo` Red Hat:enterprise_linux:6::server	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1

Show 18 moreShow less

Affected packages
Package	Affected	Fixed
`setroubleshoot-server` Red Hat:enterprise_linux:6::server	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-doc` Red Hat:enterprise_linux:6::server	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot` Red Hat:enterprise_linux:6::workstation	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-server` Red Hat:enterprise_linux:6::workstation	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot-doc` Red Hat:enterprise_linux:6::workstation	before 0:3.0.47-6.el6_6.1	0:3.0.47-6.el6_6.1
`setroubleshoot` Red Hat:enterprise_linux:7::client	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot-server` Red Hat:enterprise_linux:7::client	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot` Red Hat:enterprise_linux:7::server	before 0:3.2.17-4.1.ael7b_1	0:3.2.17-4.1.ael7b_1
`setroubleshoot-debuginfo` Red Hat:enterprise_linux:7::server	before 0:3.2.17-4.1.ael7b_1	0:3.2.17-4.1.ael7b_1
`setroubleshoot-server` Red Hat:enterprise_linux:7::server	before 0:3.2.17-4.1.ael7b_1	0:3.2.17-4.1.ael7b_1
`setroubleshoot` Red Hat:enterprise_linux:7::hypervisor	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot-debuginfo` Red Hat:enterprise_linux:7::hypervisor	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot-server` Red Hat:enterprise_linux:7::hypervisor	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot` Red Hat:enterprise_linux:7::workstation	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1
`setroubleshoot-server` Red Hat:enterprise_linux:7::workstation	before 0:3.2.17-4.1.el7_1	0:3.2.17-4.1.el7_1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Fedora 21 setroubleshootd 3.2.22 - Local Privilege Escalation	2015-03-30

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1815 is a high vulnerability (CVSS 10.0) in Selinux Setroubleshoot, published March 30, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 16.5%, the 96th percentile. Fixed in setroubleshoot 0:2.0.5-7.el5_11.

References

Show 12 moreShow less