daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-centosUpgrade abrt-retrace-clientUpgrade libreport-gtkUpgrade libreport-rhelUpgrade libreport-develUpgrade libreport-web-develUpgrade libreport-pythonUpgrade abrt-cliUpgrade libreport-plugin-mantisbtUpgrade abrt-addon-vmcoreUpgrade abrt-tuiUpgrade abrt-dbusUpgrade abrt-addon-upload-watchUpgrade abrt-guiUpgrade abrt-console-notificationUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-cliUpgrade libreport-plugin-reportuploaderUpgrade libreport-newtUpgrade libreport-plugin-loggerUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-pythonUpgrade libreport-plugin-bugzillaUpgrade libreport-gtk-develUpgrade libreport-plugin-mailxUpgrade abrt-addon-kerneloopsUpgrade abrt-desktopUpgrade abrt-gui-libsUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-xorgUpgrade libreport-webUpgrade libreport-anacondaUpgrade libreportUpgrade abrt-python-docUpgrade libreport-compatUpgrade abrtUpgrade libreport-filesystemUpgrade abrt-libsUpgrade abrt-gui-develUpgrade abrt-addon-pstoreoopsUpgrade abrt-develUpgrade libreport-plugin-ureportUpgrade abrt-pythonUpgrade libreport-plugin-rhtsupportUpgrade abrt-addon-ccpp | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-plugin-reportuploaderUpgrade abrt-addon-upload-watchUpgrade libreport-gtkUpgrade libreport-cliUpgrade libreport-web-develUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-guiUpgrade libreport-plugin-ureportUpgrade abrt-addon-pythonUpgrade abrt-addon-kerneloopsUpgrade abrt-retrace-clientUpgrade libreport-develUpgrade abrt-console-notificationUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-vmcoreUpgrade libreport-pythonUpgrade libreport-newtUpgrade libreportUpgrade abrt-tuiUpgrade libreport-gtk-develUpgrade libreport-plugin-loggerUpgrade abrt-dbusUpgrade abrtUpgrade abrt-gui-libsUpgrade abrt-addon-xorgUpgrade libreport-plugin-bugzillaUpgrade abrt-pythonUpgrade abrt-gui-develUpgrade libreport-compatUpgrade libreport-plugin-kerneloopsUpgrade abrt-libsUpgrade abrt-python-docUpgrade abrt-cliUpgrade libreport-webUpgrade abrt-addon-ccppUpgrade abrt-desktopUpgrade libreport-plugin-mailxUpgrade libreport-filesystemUpgrade libreport-anacondaUpgrade abrt-develUpgrade abrt-addon-pstoreoops | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub