The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade abrt-guiUpgrade libreport-anacondaUpgrade libreport-gtk-develUpgrade abrt-cliUpgrade libreport-gtkUpgrade abrtUpgrade abrt-tuiUpgrade abrt-gui-libsUpgrade libreport-plugin-loggerUpgrade abrt-addon-ccppUpgrade libreport-webUpgrade abrt-python-docUpgrade abrt-desktopUpgrade libreport-compatUpgrade abrt-addon-xorgUpgrade libreport-plugin-kerneloopsUpgrade libreport-filesystemUpgrade abrt-dbusUpgrade abrt-gui-develUpgrade abrt-libsUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-upload-watchUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-bugzillaUpgrade libreport-cliUpgrade abrt-addon-pstoreoopsUpgrade libreport-web-develUpgrade abrt-addon-pythonUpgrade libreport-pythonUpgrade abrt-pythonUpgrade libreportUpgrade abrt-develUpgrade abrt-retrace-clientUpgrade libreport-newtUpgrade libreport-rhel-bugzillaUpgrade abrt-console-notificationUpgrade abrt-addon-kerneloopsUpgrade libreport-develUpgrade libreport-plugin-mailxUpgrade libreport-plugin-ureportUpgrade libreport-rhel-anaconda-bugzilla | Oct 16, 2024 | Dec 7, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub