The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-addon-kerneloopsUpgrade abrt-addon-pythonUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-bugzillaUpgrade libreport-pythonUpgrade abrt-cliUpgrade libreport-plugin-loggerUpgrade libreport-newtUpgrade abrtUpgrade libreport-plugin-reportuploaderUpgrade libreport-develUpgrade libreport-plugin-mailxUpgrade abrt-addon-ccppUpgrade libreport-plugin-kerneloopsUpgrade abrt-tuiUpgrade abrt-desktopUpgrade libreportUpgrade libreport-gtk-develUpgrade btparserUpgrade abrt-guiUpgrade abrt-libsUpgrade libreport-plugin-rhtsupportUpgrade btparser-develUpgrade libreport-gtkUpgrade abrt-develUpgrade libreport-cliUpgrade btparser-python | Dec 1, 2016 | Jul 3, 2012 |
| Oracle_linux | — | Upgrade abrtUpgrade btparser-develUpgrade libreportUpgrade libreport-pythonUpgrade abrt-cliUpgrade libreport-develUpgrade libreport-plugin-mailxUpgrade abrt-addon-ccppUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-bugzillaUpgrade libreport-gtk-develUpgrade btparserUpgrade python-mehUpgrade abrt-addon-pythonUpgrade libreport-plugin-loggerUpgrade abrt-libsUpgrade abrt-tuiUpgrade abrt-desktopUpgrade abrt-addon-vmcoreUpgrade libreport-cliUpgrade btparser-pythonUpgrade abrt-guiUpgrade libreport-plugin-reportuploaderUpgrade libreport-gtkUpgrade libreport-newtUpgrade abrt-devel | Oct 16, 2024 | Jul 3, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub