daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-plugin-reportuploaderUpgrade libreport-cliUpgrade abrt-dbusUpgrade abrt-tuiUpgrade libreport-newtUpgrade libreport-rhel-bugzillaUpgrade libreport-web-develUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-retrace-clientUpgrade libreport-centosUpgrade libreport-gtkUpgrade abrt-cliUpgrade libreport-develUpgrade libreport-plugin-mantisbtUpgrade libreport-plugin-loggerUpgrade libreport-rhelUpgrade abrt-console-notificationUpgrade abrt-addon-upload-watchUpgrade abrt-addon-vmcoreUpgrade libreport-pythonUpgrade abrt-guiUpgrade abrtUpgrade abrt-addon-ccppUpgrade libreport-plugin-bugzillaUpgrade abrt-libsUpgrade libreport-plugin-ureportUpgrade abrt-addon-pstoreoopsUpgrade abrt-develUpgrade libreportUpgrade libreport-plugin-rhtsupportUpgrade libreport-anacondaUpgrade libreport-gtk-develUpgrade abrt-addon-xorgUpgrade abrt-python-docUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-pythonUpgrade libreport-plugin-mailxUpgrade libreport-webUpgrade abrt-gui-libsUpgrade abrt-gui-develUpgrade abrt-desktopUpgrade abrt-pythonUpgrade libreport-filesystemUpgrade libreport-compat | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-plugin-mailxUpgrade abrt-addon-xorgUpgrade libreportUpgrade libreport-filesystemUpgrade abrt-addon-ccppUpgrade libreport-plugin-kerneloopsUpgrade abrt-python-docUpgrade libreport-plugin-loggerUpgrade abrt-tuiUpgrade abrt-libsUpgrade libreport-plugin-bugzillaUpgrade libreport-gtk-develUpgrade abrt-cliUpgrade abrt-gui-libsUpgrade abrtUpgrade abrt-dbusUpgrade abrt-desktopUpgrade abrt-pythonUpgrade abrt-develUpgrade libreport-webUpgrade libreport-compatUpgrade abrt-addon-pstoreoopsUpgrade libreport-anacondaUpgrade abrt-gui-develUpgrade libreport-plugin-reportuploaderUpgrade libreport-cliUpgrade abrt-console-notificationUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-ureportUpgrade abrt-guiUpgrade libreport-newtUpgrade abrt-retrace-clientUpgrade abrt-addon-vmcoreUpgrade libreport-pythonUpgrade libreport-develUpgrade abrt-addon-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-rhel-bugzillaUpgrade libreport-web-develUpgrade abrt-addon-upload-watchUpgrade libreport-gtk | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub