The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
CVSS Details
- CVSS 3.0 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-addon-xorgUpgrade abrt-console-notificationUpgrade libreport-gtkUpgrade abrt-gui-develUpgrade libreport-cliUpgrade abrt-addon-pstoreoopsUpgrade abrt-guiUpgrade abrt-tuiUpgrade abrt-addon-vmcoreUpgrade abrt-libsUpgrade abrt-python-docUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-rhelUpgrade libreport-gtk-develUpgrade libreport-centosUpgrade abrt-pythonUpgrade libreport-webUpgrade libreport-plugin-rhtsupportUpgrade libreport-anacondaUpgrade libreport-plugin-ureportUpgrade abrt-gui-libsUpgrade abrt-addon-ccppUpgrade libreport-compatUpgrade abrt-cliUpgrade abrt-addon-pythonUpgrade libreport-filesystemUpgrade abrt-desktopUpgrade libreport-plugin-loggerUpgrade libreport-web-develUpgrade abrtUpgrade libreportUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-kerneloopsUpgrade libreport-rhel-bugzillaUpgrade libreport-develUpgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-mantisbtUpgrade libreport-pythonUpgrade libreport-plugin-bugzillaUpgrade libreport-newtUpgrade abrt-addon-upload-watchUpgrade abrt-dbusUpgrade libreport-plugin-mailxUpgrade abrt-retrace-clientUpgrade abrt-devel | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-plugin-bugzillaUpgrade libreport-anacondaUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrtUpgrade abrt-addon-pythonUpgrade abrt-develUpgrade libreport-filesystemUpgrade abrt-gui-libsUpgrade abrt-addon-upload-watchUpgrade libreport-newtUpgrade abrt-retrace-clientUpgrade libreport-plugin-mailxUpgrade libreport-plugin-kerneloopsUpgrade abrt-dbusUpgrade abrt-cliUpgrade libreport-plugin-ureportUpgrade libreport-rhel-bugzillaUpgrade libreport-pythonUpgrade libreport-web-develUpgrade libreport-develUpgrade abrt-addon-kerneloopsUpgrade libreport-compatUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-vmcoreUpgrade abrt-desktopUpgrade abrt-gui-develUpgrade libreport-gtkUpgrade abrt-console-notificationUpgrade libreport-gtk-develUpgrade abrt-addon-ccppUpgrade libreport-webUpgrade libreportUpgrade abrt-tuiUpgrade abrt-python-docUpgrade abrt-addon-pstoreoopsUpgrade abrt-guiUpgrade abrt-pythonUpgrade abrt-libsUpgrade libreport-plugin-loggerUpgrade libreport-cliUpgrade abrt-addon-xorg | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub