abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-plugin-bugzillaUpgrade libreport-plugin-rhtsupportUpgrade libreport-plugin-loggerUpgrade libreport-pythonUpgrade libreport-gtk-develUpgrade abrt-addon-vmcoreUpgrade abrt-tuiUpgrade libreportUpgrade libreport-cliUpgrade abrt-addon-kerneloopsUpgrade abrt-libsUpgrade abrt-guiUpgrade libreport-develUpgrade abrtUpgrade abrt-cliUpgrade abrt-addon-pythonUpgrade libreport-plugin-reportuploaderUpgrade abrt-develUpgrade libreport-newtUpgrade libreport-gtkUpgrade abrt-addon-ccppUpgrade libreport-plugin-mailxUpgrade libreport-plugin-kerneloopsUpgrade abrt-desktop | Dec 1, 2016 | Mar 12, 2013 |
| Oracle_linux | — | Upgrade abrt-libsUpgrade abrt-addon-kerneloopsUpgrade libreport-develUpgrade abrt-tuiUpgrade libreport-plugin-loggerUpgrade libreport-plugin-mailxUpgrade libreport-pythonUpgrade libreport-gtkUpgrade abrt-desktopUpgrade abrt-cliUpgrade abrt-guiUpgrade libreport-gtk-develUpgrade abrt-addon-ccppUpgrade libreport-plugin-kerneloopsUpgrade abrtUpgrade abrt-addon-pythonUpgrade libreport-plugin-reportuploaderUpgrade abrt-develUpgrade libreport-newtUpgrade libreport-plugin-bugzillaUpgrade libreport-cliUpgrade abrt-addon-vmcoreUpgrade libreport | Oct 16, 2024 | Mar 12, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub