Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-web-develUpgrade abrt-retrace-clientUpgrade abrt-addon-xorgUpgrade libreport-plugin-loggerUpgrade abrt-addon-kerneloopsUpgrade abrt-guiUpgrade libreport-plugin-mailxUpgrade libreport-newtUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-centosUpgrade abrtUpgrade abrt-pythonUpgrade abrt-addon-vmcoreUpgrade libreport-pythonUpgrade libreport-cliUpgrade libreport-plugin-reportuploaderUpgrade abrt-tuiUpgrade abrt-cliUpgrade libreport-gtkUpgrade libreport-compatUpgrade abrt-dbusUpgrade abrt-console-notificationUpgrade libreport-plugin-mantisbtUpgrade abrt-addon-upload-watchUpgrade abrt-python-docUpgrade libreportUpgrade abrt-desktopUpgrade abrt-addon-pythonUpgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-bugzillaUpgrade libreport-webUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-ccppUpgrade abrt-gui-develUpgrade libreport-plugin-ureportUpgrade abrt-develUpgrade libreport-filesystemUpgrade libreport-rhelUpgrade libreport-anacondaUpgrade abrt-gui-libsUpgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-rhtsupportUpgrade abrt-libsUpgrade libreport-develUpgrade libreport-gtk-devel | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-desktopUpgrade libreport-webUpgrade libreport-compatUpgrade abrt-addon-xorgUpgrade libreport-plugin-kerneloopsUpgrade abrt-libsUpgrade abrt-tuiUpgrade libreport-gtk-develUpgrade abrt-gui-develUpgrade libreportUpgrade libreport-plugin-loggerUpgrade abrt-addon-ccppUpgrade libreport-cliUpgrade abrt-pythonUpgrade abrt-addon-pstoreoopsUpgrade abrt-python-docUpgrade libreport-plugin-ureportUpgrade abrt-dbusUpgrade abrt-develUpgrade abrtUpgrade libreport-pythonUpgrade libreport-anacondaUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-mailxUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-develUpgrade abrt-gui-libsUpgrade abrt-retrace-clientUpgrade libreport-filesystemUpgrade libreport-gtkUpgrade libreport-newtUpgrade libreport-plugin-reportuploaderUpgrade libreport-rhel-bugzillaUpgrade libreport-web-develUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-pythonUpgrade abrt-guiUpgrade abrt-console-notificationUpgrade abrt-addon-vmcoreUpgrade abrt-cliUpgrade libreport-plugin-bugzilla | Oct 16, 2024 | Jun 26, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub