The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
CVSS Details
- CVSS 3.0 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-rhel-bugzillaUpgrade abrt-gui-libsUpgrade abrt-desktopUpgrade libreport-newtUpgrade libreport-plugin-ureportUpgrade libreport-filesystemUpgrade libreport-pythonUpgrade libreport-plugin-mantisbtUpgrade libreport-plugin-mailxUpgrade abrt-addon-ccppUpgrade libreport-plugin-reportuploaderUpgrade abrt-develUpgrade abrt-addon-pythonUpgrade libreport-compatUpgrade libreport-develUpgrade libreport-plugin-kerneloopsUpgrade abrt-dbusUpgrade abrt-retrace-clientUpgrade abrt-cliUpgrade libreport-plugin-rhtsupportUpgrade abrtUpgrade abrt-addon-kerneloopsUpgrade libreport-web-develUpgrade libreport-plugin-loggerUpgrade libreportUpgrade libreport-plugin-bugzillaUpgrade libreport-anacondaUpgrade abrt-addon-upload-watchUpgrade libreport-cliUpgrade libreport-webUpgrade abrt-libsUpgrade libreport-centosUpgrade abrt-console-notificationUpgrade abrt-guiUpgrade abrt-python-docUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-rhelUpgrade abrt-addon-vmcoreUpgrade abrt-gui-develUpgrade abrt-addon-xorgUpgrade libreport-gtk-develUpgrade abrt-pythonUpgrade abrt-tuiUpgrade abrt-addon-pstoreoopsUpgrade libreport-gtk | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-guiUpgrade abrt-tuiUpgrade libreport-cliUpgrade libreport-gtkUpgrade abrt-console-notificationUpgrade abrt-addon-xorgUpgrade abrt-libsUpgrade libreport-webUpgrade abrt-desktopUpgrade abrt-addon-ccppUpgrade libreport-gtk-develUpgrade abrt-gui-develUpgrade abrt-addon-vmcoreUpgrade abrt-pythonUpgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-loggerUpgrade libreportUpgrade abrt-python-docUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-kerneloopsUpgrade libreport-filesystemUpgrade abrt-gui-libsUpgrade abrt-dbusUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-retrace-clientUpgrade libreport-plugin-ureportUpgrade libreport-newtUpgrade libreport-anacondaUpgrade libreport-plugin-kerneloopsUpgrade libreport-web-develUpgrade abrtUpgrade libreport-develUpgrade libreport-compatUpgrade libreport-plugin-reportuploaderUpgrade abrt-develUpgrade libreport-plugin-mailxUpgrade libreport-pythonUpgrade abrt-addon-pythonUpgrade abrt-addon-upload-watchUpgrade libreport-rhel-bugzillaUpgrade abrt-cli | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub