Description
fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | system-config-firewall +2 | 1.2.27-3.el6_1.3 | RHSA-2011:0953 |
| RHEL 6 | system-config-printer +2 | 1.1.16-17.el6_1.2 | RHSA-2011:0953 |
Advisories 1
- RHSA-2011:0953 Red Hat Security Advisory: system-config-firewall security update Red Hat Security Advisories (RHSA) · Mar 13, 2026
References
- FEDORA-2011-9652 vendor-advisory
- systemconfigfirewall-priv-escalation(68734) vdb-entry
- [oss-security] 20110718 CVE-2011-2520: flaw in system-config-firewall's usage of pickle allows privilege escalation mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=717985
- RHSA-2011:0953 vendor-advisory
- 48715 vdb-entry
- 1025793 vdb-entry
- 45294 third-party-advisory