sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sos | Jul 6, 2016 | Dec 17, 2015 |
| Debian | — | Upgrade sosreport | Jul 30, 2024 | Nov 6, 2017 |
| Oracle_linux | — | Upgrade sos | Oct 16, 2024 | Nov 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 1, 2015 |
| Ubuntu | — | Upgrade sosreport | Dec 18, 2015 | Dec 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub