The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-retrace-clientUpgrade libreport-plugin-loggerUpgrade abrt-addon-vmcoreUpgrade libreport-gtk-develUpgrade libreport-pythonUpgrade libreport-plugin-mantisbtUpgrade libreport-plugin-ureportUpgrade libreport-filesystemUpgrade abrt-gui-libsUpgrade abrt-dbusUpgrade abrt-tuiUpgrade abrt-addon-upload-watchUpgrade abrt-addon-xorgUpgrade libreport-compatUpgrade abrt-cliUpgrade libreport-gtkUpgrade libreport-cliUpgrade abrt-gui-develUpgrade libreport-plugin-rhtsupportUpgrade libreport-webUpgrade abrtUpgrade abrt-guiUpgrade abrt-addon-pythonUpgrade abrt-libsUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-ccppUpgrade libreport-develUpgrade libreport-web-develUpgrade abrt-addon-kerneloopsUpgrade libreport-rhelUpgrade abrt-develUpgrade abrt-desktopUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-anacondaUpgrade libreport-centosUpgrade abrt-python-docUpgrade libreport-plugin-bugzillaUpgrade libreport-rhel-bugzillaUpgrade libreport-plugin-mailxUpgrade libreportUpgrade abrt-pythonUpgrade libreport-plugin-reportuploaderUpgrade abrt-console-notificationUpgrade abrt-addon-pstoreoopsUpgrade libreport-newt | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-addon-vmcoreUpgrade abrt-addon-kerneloopsUpgrade libreport-webUpgrade abrt-libsUpgrade abrt-dbusUpgrade abrt-addon-upload-watchUpgrade abrt-console-notificationUpgrade libreport-plugin-loggerUpgrade libreport-develUpgrade abrt-gui-develUpgrade abrt-python-docUpgrade libreport-gtkUpgrade abrtUpgrade libreport-cliUpgrade abrt-cliUpgrade abrt-pythonUpgrade libreport-compatUpgrade libreport-gtk-develUpgrade abrt-guiUpgrade abrt-addon-pstoreoopsUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-addon-pythonUpgrade libreport-plugin-mailxUpgrade abrt-develUpgrade libreport-web-develUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-xorgUpgrade libreport-anacondaUpgrade libreport-pythonUpgrade abrt-desktopUpgrade libreport-newtUpgrade libreport-plugin-reportuploaderUpgrade libreport-filesystemUpgrade libreportUpgrade abrt-tuiUpgrade libreport-rhel-bugzillaUpgrade libreport-plugin-ureportUpgrade libreport-plugin-kerneloopsUpgrade abrt-retrace-clientUpgrade abrt-addon-ccppUpgrade abrt-gui-libs | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub