The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-mailxUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-reportuploaderUpgrade abrt-dbusUpgrade libreport-plugin-ureportUpgrade libreport-plugin-rhtsupportUpgrade libreport-newtUpgrade abrt-retrace-clientUpgrade libreport-develUpgrade libreport-plugin-bugzillaUpgrade abrt-develUpgrade abrt-addon-pythonUpgrade libreport-rhel-bugzillaUpgrade libreport-anacondaUpgrade abrt-addon-upload-watchUpgrade libreport-compatUpgrade abrtUpgrade abrt-cliUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-addon-ccppUpgrade libreport-pythonUpgrade abrt-gui-libsUpgrade libreport-web-develUpgrade libreport-filesystemUpgrade libreport-plugin-mantisbtUpgrade abrt-desktopUpgrade abrt-gui-develUpgrade libreportUpgrade libreport-plugin-loggerUpgrade abrt-tuiUpgrade libreport-cliUpgrade abrt-console-notificationUpgrade abrt-python-docUpgrade abrt-libsUpgrade abrt-addon-pstoreoopsUpgrade libreport-webUpgrade libreport-gtkUpgrade libreport-gtk-develUpgrade abrt-addon-xorgUpgrade libreport-centosUpgrade abrt-pythonUpgrade abrt-guiUpgrade abrt-addon-vmcoreUpgrade libreport-rhel | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-compatUpgrade libreport-plugin-ureportUpgrade libreport-plugin-loggerUpgrade abrtUpgrade abrt-gui-libsUpgrade abrt-addon-ccppUpgrade abrt-guiUpgrade libreport-gtkUpgrade abrt-tuiUpgrade libreport-filesystemUpgrade abrt-gui-develUpgrade libreport-webUpgrade abrt-addon-vmcoreUpgrade abrt-python-docUpgrade libreport-plugin-kerneloopsUpgrade libreport-gtk-develUpgrade abrt-dbusUpgrade abrt-addon-xorgUpgrade abrt-cliUpgrade libreport-anacondaUpgrade abrt-console-notificationUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-bugzillaUpgrade libreport-web-develUpgrade libreport-rhel-bugzillaUpgrade libreport-plugin-mailxUpgrade libreport-newtUpgrade abrt-addon-pythonUpgrade abrt-desktopUpgrade abrt-retrace-clientUpgrade libreport-pythonUpgrade libreport-plugin-reportuploaderUpgrade libreport-develUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-pythonUpgrade abrt-addon-kerneloopsUpgrade libreport-cliUpgrade abrt-addon-pstoreoopsUpgrade abrt-develUpgrade libreportUpgrade abrt-libs | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub