Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-rhel-bugzillaUpgrade abrt-gui-develUpgrade abrt-addon-pythonUpgrade abrt-desktopUpgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-pstoreoopsUpgrade libreport-anacondaUpgrade abrt-gui-libsUpgrade abrt-develUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade libreport-develUpgrade libreport-rhelUpgrade libreport-filesystemUpgrade libreportUpgrade libreport-webUpgrade libreport-gtk-develUpgrade libreport-plugin-ureportUpgrade libreport-plugin-rhtsupportUpgrade abrt-pythonUpgrade abrt-tuiUpgrade libreport-pythonUpgrade abrt-addon-upload-watchUpgrade libreport-gtkUpgrade libreport-plugin-mailxUpgrade libreport-web-develUpgrade libreport-plugin-mantisbtUpgrade libreport-plugin-loggerUpgrade abrt-guiUpgrade libreport-centosUpgrade abrt-console-notificationUpgrade libreport-plugin-reportuploaderUpgrade libreport-newtUpgrade abrt-retrace-clientUpgrade abrt-cliUpgrade libreport-cliUpgrade libreport-compatUpgrade abrt-python-docUpgrade abrt-addon-kerneloopsUpgrade abrt-dbusUpgrade abrt-addon-vmcoreUpgrade abrt-addon-xorgUpgrade abrtUpgrade libreport-rhel-anaconda-bugzilla | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-addon-upload-watchUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-gui-libsUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-mailxUpgrade libreport-anacondaUpgrade abrt-cliUpgrade abrt-dbusUpgrade libreport-pythonUpgrade libreport-plugin-ureportUpgrade abrt-console-notificationUpgrade abrtUpgrade libreport-plugin-reportuploaderUpgrade abrt-guiUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-pythonUpgrade libreport-newtUpgrade libreport-filesystemUpgrade libreport-plugin-bugzillaUpgrade libreport-web-develUpgrade libreport-develUpgrade abrt-develUpgrade abrt-retrace-clientUpgrade libreport-rhel-bugzillaUpgrade libreport-gtkUpgrade libreport-gtk-develUpgrade libreport-cliUpgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-kerneloopsUpgrade abrt-gui-develUpgrade libreportUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade libreport-webUpgrade abrt-addon-xorgUpgrade abrt-pythonUpgrade libreport-compatUpgrade libreport-plugin-loggerUpgrade abrt-tuiUpgrade abrt-desktopUpgrade abrt-python-doc | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub