Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-desktopUpgrade libreport-webUpgrade libreport-rhel-bugzillaUpgrade abrt-gui-libsUpgrade abrt-libsUpgrade libreportUpgrade libreport-plugin-ureportUpgrade libreport-plugin-rhtsupportUpgrade libreport-filesystemUpgrade libreport-anacondaUpgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-kerneloopsUpgrade libreport-gtk-develUpgrade libreport-plugin-bugzillaUpgrade libreport-develUpgrade abrt-gui-develUpgrade abrt-addon-pythonUpgrade abrt-develUpgrade abrt-addon-ccppUpgrade libreport-rhelUpgrade abrt-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-tuiUpgrade libreport-cliUpgrade libreport-plugin-reportuploaderUpgrade abrt-cliUpgrade abrt-dbusUpgrade abrt-retrace-clientUpgrade abrt-guiUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-mantisbtUpgrade abrtUpgrade abrt-addon-vmcoreUpgrade libreport-pythonUpgrade abrt-console-notificationUpgrade libreport-compatUpgrade libreport-centosUpgrade abrt-addon-xorgUpgrade libreport-plugin-mailxUpgrade libreport-web-develUpgrade abrt-python-docUpgrade libreport-plugin-loggerUpgrade abrt-addon-upload-watchUpgrade libreport-gtkUpgrade libreport-newt | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-cliUpgrade abrt-libsUpgrade abrt-gui-develUpgrade abrt-addon-pstoreoopsUpgrade abrt-tuiUpgrade libreport-webUpgrade libreport-compatUpgrade abrt-addon-xorgUpgrade libreport-plugin-loggerUpgrade libreport-gtk-develUpgrade libreportUpgrade abrt-pythonUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-ccppUpgrade abrt-python-docUpgrade abrt-desktopUpgrade abrt-gui-libsUpgrade libreport-plugin-ureportUpgrade abrt-addon-upload-watchUpgrade libreport-gtkUpgrade abrt-addon-kerneloopsUpgrade abrtUpgrade abrt-cliUpgrade abrt-addon-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-newtUpgrade abrt-develUpgrade libreport-plugin-reportuploaderUpgrade libreport-plugin-mailxUpgrade libreport-web-develUpgrade libreport-rhel-bugzillaUpgrade abrt-retrace-clientUpgrade abrt-guiUpgrade libreport-filesystemUpgrade libreport-develUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-vmcoreUpgrade libreport-pythonUpgrade libreport-anacondaUpgrade abrt-dbusUpgrade abrt-console-notification | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub