The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-dbusUpgrade abrt-gui-libsUpgrade abrtUpgrade abrt-addon-xorgUpgrade abrt-retrace-clientUpgrade libreport-webUpgrade libreport-plugin-ureportUpgrade libreport-gtkUpgrade libreport-pythonUpgrade libreport-filesystemUpgrade libreport-cliUpgrade abrt-tuiUpgrade abrt-gui-develUpgrade abrt-cliUpgrade abrt-addon-vmcoreUpgrade abrt-guiUpgrade libreport-plugin-rhtsupportUpgrade libreport-gtk-develUpgrade libreport-plugin-loggerUpgrade abrt-addon-upload-watchUpgrade libreport-compatUpgrade libreport-plugin-mantisbtUpgrade libreport-plugin-mailxUpgrade abrt-console-notificationUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-pstoreoopsUpgrade abrt-python-docUpgrade libreport-rhelUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-pythonUpgrade libreport-develUpgrade abrt-libsUpgrade libreport-plugin-kerneloopsUpgrade libreport-newtUpgrade libreport-web-develUpgrade libreport-anacondaUpgrade libreportUpgrade libreport-centosUpgrade abrt-pythonUpgrade abrt-addon-kerneloopsUpgrade abrt-develUpgrade libreport-plugin-bugzillaUpgrade abrt-desktopUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-addon-ccpp | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-pythonUpgrade libreport-plugin-ureportUpgrade libreport-rhel-bugzillaUpgrade libreport-anacondaUpgrade libreport-filesystemUpgrade libreport-newtUpgrade abrt-gui-libsUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-xorgUpgrade abrt-desktopUpgrade libreport-plugin-reportuploaderUpgrade abrt-tuiUpgrade libreportUpgrade abrt-addon-ccppUpgrade abrt-retrace-clientUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade libreport-web-develUpgrade libreport-compatUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-cliUpgrade abrt-addon-upload-watchUpgrade libreport-develUpgrade abrt-libsUpgrade abrt-pythonUpgrade libreport-cliUpgrade abrt-guiUpgrade libreport-plugin-loggerUpgrade abrt-python-docUpgrade libreport-webUpgrade abrt-develUpgrade abrtUpgrade abrt-dbusUpgrade libreport-gtkUpgrade libreport-plugin-mailxUpgrade abrt-console-notificationUpgrade abrt-addon-pythonUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-vmcoreUpgrade libreport-gtk-develUpgrade abrt-gui-devel | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub