Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-newtUpgrade libreport-plugin-loggerUpgrade abrt-python-docUpgrade libreport-pythonUpgrade abrt-tuiUpgrade abrt-retrace-clientUpgrade libreport-plugin-mailxUpgrade abrt-addon-xorgUpgrade abrt-addon-kerneloopsUpgrade libreport-cliUpgrade abrt-addon-upload-watchUpgrade libreport-compatUpgrade libreport-web-develUpgrade abrt-cliUpgrade abrt-dbusUpgrade abrt-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-centosUpgrade abrt-guiUpgrade abrtUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-mantisbtUpgrade abrt-console-notificationUpgrade libreport-gtkUpgrade abrt-gui-develUpgrade libreport-plugin-ureportUpgrade libreport-filesystemUpgrade libreport-rhel-bugzillaUpgrade libreport-anacondaUpgrade abrt-develUpgrade abrt-libsUpgrade abrt-addon-pythonUpgrade abrt-gui-libsUpgrade libreport-plugin-kerneloopsUpgrade libreport-webUpgrade libreport-develUpgrade libreport-gtk-develUpgrade abrt-addon-pstoreoopsUpgrade abrt-desktopUpgrade libreport-plugin-bugzillaUpgrade libreport-plugin-rhtsupportUpgrade abrt-addon-ccppUpgrade libreport-rhelUpgrade libreport | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-pythonUpgrade abrt-gui-develUpgrade libreportUpgrade libreport-plugin-loggerUpgrade libreport-cliUpgrade abrt-tuiUpgrade abrt-desktopUpgrade abrt-addon-xorgUpgrade libreport-webUpgrade abrt-addon-pstoreoopsUpgrade libreport-compatUpgrade libreport-gtk-develUpgrade libreport-plugin-kerneloopsUpgrade abrt-python-docUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade abrt-console-notificationUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-bugzillaUpgrade abrt-cliUpgrade abrtUpgrade libreport-gtkUpgrade libreport-plugin-mailxUpgrade abrt-dbusUpgrade libreport-anacondaUpgrade libreport-pythonUpgrade libreport-filesystemUpgrade abrt-addon-pythonUpgrade libreport-plugin-ureportUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-kerneloopsUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-vmcoreUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-web-develUpgrade abrt-gui-libsUpgrade libreport-newtUpgrade abrt-develUpgrade abrt-guiUpgrade libreport-develUpgrade abrt-retrace-client | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub