Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-plugin-rhtsupportUpgrade abrt-gui-libsUpgrade libreport-webUpgrade libreport-rhel-bugzillaUpgrade abrt-gui-develUpgrade libreport-plugin-ureportUpgrade libreport-filesystemUpgrade libreport-anacondaUpgrade libreport-rhelUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-develUpgrade libreport-develUpgrade abrt-libsUpgrade abrt-desktopUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-pythonUpgrade abrt-addon-ccppUpgrade libreport-gtk-develUpgrade libreportUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-tuiUpgrade abrt-addon-xorgUpgrade libreport-plugin-loggerUpgrade abrt-retrace-clientUpgrade abrt-addon-upload-watchUpgrade libreport-centosUpgrade libreport-plugin-reportuploaderUpgrade abrt-dbusUpgrade libreport-cliUpgrade abrt-console-notificationUpgrade libreport-compatUpgrade abrt-cliUpgrade libreport-web-develUpgrade libreport-plugin-mailxUpgrade abrt-addon-vmcoreUpgrade abrt-python-docUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-mantisbtUpgrade abrtUpgrade libreport-gtkUpgrade abrt-pythonUpgrade libreport-pythonUpgrade libreport-newtUpgrade abrt-gui | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-tuiUpgrade libreport-plugin-loggerUpgrade abrt-addon-xorgUpgrade libreport-cliUpgrade abrt-desktopUpgrade libreport-plugin-kerneloopsUpgrade libreportUpgrade libreport-webUpgrade libreport-compatUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade libreport-gtk-develUpgrade abrt-pythonUpgrade abrt-addon-pstoreoopsUpgrade abrt-python-docUpgrade abrt-gui-develUpgrade abrt-addon-vmcoreUpgrade abrt-dbusUpgrade abrt-console-notificationUpgrade abrt-addon-pythonUpgrade abrt-gui-libsUpgrade abrt-retrace-clientUpgrade libreport-rhel-bugzillaUpgrade abrt-cliUpgrade libreport-plugin-bugzillaUpgrade libreport-anacondaUpgrade libreport-filesystemUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-plugin-reportuploaderUpgrade abrtUpgrade abrt-develUpgrade libreport-pythonUpgrade libreport-plugin-ureportUpgrade abrt-addon-upload-watchUpgrade libreport-develUpgrade abrt-guiUpgrade libreport-newtUpgrade libreport-web-develUpgrade libreport-gtkUpgrade libreport-plugin-mailxUpgrade abrt-addon-kerneloops | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub