Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-pythonUpgrade abrt-tuiUpgrade libreport-pythonUpgrade abrt-addon-xorgUpgrade libreport-plugin-mailxUpgrade abrt-addon-upload-watchUpgrade libreport-cliUpgrade libreport-plugin-mantisbtUpgrade abrtUpgrade abrt-addon-kerneloopsUpgrade libreport-web-develUpgrade abrt-python-docUpgrade libreport-plugin-loggerUpgrade libreport-newtUpgrade abrt-retrace-clientUpgrade abrt-console-notificationUpgrade abrt-guiUpgrade libreport-centosUpgrade libreport-gtkUpgrade libreport-compatUpgrade abrt-dbusUpgrade libreport-plugin-reportuploaderUpgrade abrt-cliUpgrade abrt-addon-vmcoreUpgrade abrt-gui-develUpgrade abrt-addon-pstoreoopsUpgrade libreport-webUpgrade libreport-filesystemUpgrade abrt-gui-libsUpgrade abrt-desktopUpgrade abrt-addon-pythonUpgrade libreport-plugin-kerneloopsUpgrade libreportUpgrade libreport-plugin-rhtsupportUpgrade abrt-develUpgrade libreport-rhelUpgrade libreport-plugin-ureportUpgrade libreport-anacondaUpgrade libreport-plugin-bugzillaUpgrade libreport-rhel-bugzillaUpgrade abrt-libsUpgrade libreport-gtk-develUpgrade libreport-develUpgrade abrt-addon-ccpp | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-addon-xorgUpgrade libreport-gtk-develUpgrade abrt-desktopUpgrade libreport-webUpgrade libreport-compatUpgrade abrt-addon-pstoreoopsUpgrade abrt-pythonUpgrade abrt-python-docUpgrade libreport-cliUpgrade abrt-libsUpgrade libreportUpgrade libreport-plugin-loggerUpgrade abrt-addon-ccppUpgrade abrt-tuiUpgrade libreport-plugin-kerneloopsUpgrade abrt-gui-develUpgrade libreport-pythonUpgrade libreport-newtUpgrade abrt-console-notificationUpgrade abrt-retrace-clientUpgrade abrt-develUpgrade abrt-guiUpgrade libreport-web-develUpgrade libreport-gtkUpgrade libreport-filesystemUpgrade abrtUpgrade libreport-plugin-mailxUpgrade abrt-addon-pythonUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-reportuploaderUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-ureportUpgrade abrt-cliUpgrade libreport-develUpgrade libreport-plugin-bugzillaUpgrade abrt-dbusUpgrade abrt-gui-libsUpgrade abrt-addon-vmcoreUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-anaconda | Oct 16, 2024 | Jun 26, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub