Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-plugin-rhtsupportUpgrade abrt-gui-libsUpgrade libreport-develUpgrade abrt-develUpgrade libreport-rhel-bugzillaUpgrade libreport-anacondaUpgrade libreportUpgrade libreport-rhelUpgrade abrt-desktopUpgrade libreport-plugin-bugzillaUpgrade libreport-filesystemUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-pythonUpgrade abrt-libsUpgrade libreport-webUpgrade abrt-addon-ccppUpgrade libreport-gtk-develUpgrade libreport-plugin-ureportUpgrade abrt-gui-develUpgrade abrtUpgrade abrt-console-notificationUpgrade abrt-dbusUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-loggerUpgrade abrt-python-docUpgrade libreport-pythonUpgrade libreport-compatUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-guiUpgrade libreport-plugin-reportuploaderUpgrade libreport-newtUpgrade abrt-cliUpgrade abrt-tuiUpgrade abrt-pythonUpgrade abrt-addon-upload-watchUpgrade libreport-centosUpgrade libreport-plugin-mantisbtUpgrade libreport-web-develUpgrade libreport-cliUpgrade abrt-addon-kerneloopsUpgrade abrt-retrace-clientUpgrade abrt-addon-xorgUpgrade libreport-plugin-mailxUpgrade libreport-gtk | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-libsUpgrade libreport-plugin-kerneloopsUpgrade abrt-desktopUpgrade abrt-python-docUpgrade abrt-addon-xorgUpgrade libreport-gtk-develUpgrade abrt-addon-ccppUpgrade libreport-webUpgrade abrt-addon-pstoreoopsUpgrade abrt-gui-develUpgrade libreport-cliUpgrade libreport-plugin-loggerUpgrade abrt-tuiUpgrade libreport-compatUpgrade abrt-pythonUpgrade libreportUpgrade abrt-develUpgrade abrt-retrace-clientUpgrade libreport-rhel-bugzillaUpgrade libreport-develUpgrade abrt-addon-upload-watchUpgrade abrt-addon-pythonUpgrade abrt-guiUpgrade libreport-gtkUpgrade libreport-web-develUpgrade libreport-newtUpgrade libreport-plugin-ureportUpgrade libreport-plugin-reportuploaderUpgrade libreport-pythonUpgrade libreport-filesystemUpgrade abrt-addon-vmcoreUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-plugin-mailxUpgrade libreport-plugin-bugzillaUpgrade libreport-anacondaUpgrade abrt-console-notificationUpgrade abrt-dbusUpgrade abrt-cliUpgrade abrtUpgrade abrt-gui-libsUpgrade abrt-addon-kerneloops | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub