The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-plugin-reportuploaderUpgrade libreport-plugin-kerneloopsUpgrade libreport-newtUpgrade abrt-dbusUpgrade abrt-addon-pythonUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-mailxUpgrade libreport-compatUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-pythonUpgrade libreport-develUpgrade libreport-anacondaUpgrade abrtUpgrade libreport-plugin-ureportUpgrade abrt-addon-kerneloopsUpgrade libreport-filesystemUpgrade libreport-web-develUpgrade abrt-retrace-clientUpgrade abrt-addon-ccppUpgrade abrt-develUpgrade libreport-plugin-bugzillaUpgrade libreport-plugin-mantisbtUpgrade abrt-gui-libsUpgrade abrt-cliUpgrade libreport-plugin-rhtsupportUpgrade libreport-plugin-loggerUpgrade libreport-centosUpgrade abrt-pythonUpgrade abrt-addon-vmcoreUpgrade abrt-libsUpgrade libreport-rhelUpgrade libreportUpgrade abrt-tuiUpgrade abrt-gui-develUpgrade abrt-guiUpgrade libreport-gtkUpgrade abrt-addon-pstoreoopsUpgrade libreport-cliUpgrade abrt-python-docUpgrade abrt-addon-xorgUpgrade abrt-desktopUpgrade abrt-console-notificationUpgrade libreport-webUpgrade libreport-gtk-devel | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-newtUpgrade libreport-develUpgrade libreport-web-develUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-upload-watchUpgrade libreport-cliUpgrade libreport-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-pythonUpgrade abrt-console-notificationUpgrade abrt-libsUpgrade abrt-develUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-pythonUpgrade libreportUpgrade libreport-plugin-bugzillaUpgrade abrt-retrace-clientUpgrade abrt-desktopUpgrade libreport-rhel-bugzillaUpgrade libreport-plugin-mailxUpgrade abrt-gui-develUpgrade abrt-tuiUpgrade abrt-addon-ccppUpgrade libreport-plugin-ureportUpgrade libreport-gtkUpgrade libreport-compatUpgrade libreport-gtk-develUpgrade abrt-addon-xorgUpgrade libreport-webUpgrade abrt-dbusUpgrade abrt-python-docUpgrade abrtUpgrade abrt-gui-libsUpgrade abrt-guiUpgrade abrt-cliUpgrade libreport-plugin-loggerUpgrade libreport-plugin-kerneloopsUpgrade libreport-filesystemUpgrade libreport-anacondaUpgrade abrt-addon-vmcore | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub