Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-addon-upload-watchUpgrade libreport-cliUpgrade abrt-addon-kerneloopsUpgrade libreport-web-develUpgrade abrt-pythonUpgrade libreport-gtkUpgrade libreport-compatUpgrade abrt-dbusUpgrade abrtUpgrade abrt-tuiUpgrade libreport-plugin-reportuploaderUpgrade libreport-plugin-mantisbtUpgrade libreport-centosUpgrade abrt-addon-vmcoreUpgrade abrt-cliUpgrade libreport-pythonUpgrade abrt-python-docUpgrade libreport-plugin-mailxUpgrade abrt-retrace-clientUpgrade abrt-addon-xorgUpgrade libreport-newtUpgrade abrt-console-notificationUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-guiUpgrade libreport-plugin-loggerUpgrade libreport-develUpgrade abrt-libsUpgrade libreport-gtk-develUpgrade libreport-webUpgrade abrt-addon-ccppUpgrade libreport-filesystemUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-pythonUpgrade abrt-desktopUpgrade libreport-rhelUpgrade libreport-plugin-rhtsupportUpgrade abrt-gui-develUpgrade abrt-develUpgrade libreportUpgrade abrt-gui-libsUpgrade libreport-anacondaUpgrade libreport-rhel-bugzillaUpgrade libreport-plugin-ureportUpgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-kerneloops | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-addon-pythonUpgrade abrt-develUpgrade libreport-plugin-reportuploaderUpgrade libreport-rhel-bugzillaUpgrade libreport-develUpgrade abrt-retrace-clientUpgrade libreport-filesystemUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-ureportUpgrade abrt-console-notificationUpgrade libreport-newtUpgrade abrt-guiUpgrade abrt-dbusUpgrade abrt-addon-kerneloopsUpgrade libreport-gtkUpgrade abrt-cliUpgrade libreport-web-develUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-bugzillaUpgrade abrtUpgrade libreport-anacondaUpgrade abrt-gui-libsUpgrade libreport-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-plugin-mailxUpgrade libreport-cliUpgrade libreportUpgrade libreport-gtk-develUpgrade libreport-plugin-kerneloopsUpgrade abrt-python-docUpgrade abrt-gui-develUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade abrt-tuiUpgrade abrt-desktopUpgrade libreport-compatUpgrade abrt-addon-xorgUpgrade abrt-pythonUpgrade libreport-plugin-loggerUpgrade libreport-web | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub