The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sos | Jul 6, 2016 | Dec 17, 2015 |
| Debian | — | Upgrade sosreport | Jul 30, 2024 | Nov 6, 2017 |
| Oracle_linux | — | Upgrade sos | Oct 16, 2024 | Nov 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 1, 2015 |
| Ubuntu | — | Upgrade sosreport | Dec 18, 2015 | Dec 17, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub