The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade libreport-cliUpgrade abrt-addon-pstoreoopsUpgrade abrt-pythonUpgrade libreport-gtkUpgrade abrt-libsUpgrade abrt-gui-develUpgrade abrt-guiUpgrade libreport-webUpgrade abrt-addon-xorgUpgrade abrt-python-docUpgrade libreport-gtk-develUpgrade abrt-console-notificationUpgrade abrt-addon-vmcoreUpgrade abrt-tuiUpgrade abrt-addon-upload-watchUpgrade libreport-newtUpgrade libreport-pythonUpgrade libreport-develUpgrade libreport-plugin-kerneloopsUpgrade libreport-compatUpgrade abrt-addon-pythonUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-bugzillaUpgrade abrt-retrace-clientUpgrade libreport-plugin-mailxUpgrade abrtUpgrade libreport-plugin-ureportUpgrade abrt-desktopUpgrade abrt-dbusUpgrade libreport-plugin-reportuploaderUpgrade libreport-filesystemUpgrade libreport-anacondaUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-plugin-loggerUpgrade libreport-web-develUpgrade abrt-gui-libsUpgrade abrt-addon-ccppUpgrade abrt-cliUpgrade libreportUpgrade abrt-develUpgrade libreport-rhel-bugzilla | Oct 16, 2024 | Dec 7, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub