vulnerability

Oracle Linux: CVE-2015-3147: ELSA-2015-1210: abrt security update (MODERATE) (Multiple Advisories)

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:C/A:N)
Published
Jan 14, 2020
Added
Oct 16, 2024
Modified
Jan 7, 2025

Description

daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.

Solution(s)

oracle-linux-upgrade-abrtoracle-linux-upgrade-abrt-addon-ccpporacle-linux-upgrade-abrt-addon-kerneloopsoracle-linux-upgrade-abrt-addon-pstoreoopsoracle-linux-upgrade-abrt-addon-pythonoracle-linux-upgrade-abrt-addon-upload-watchoracle-linux-upgrade-abrt-addon-vmcoreoracle-linux-upgrade-abrt-addon-xorgoracle-linux-upgrade-abrt-clioracle-linux-upgrade-abrt-console-notificationoracle-linux-upgrade-abrt-dbusoracle-linux-upgrade-abrt-desktoporacle-linux-upgrade-abrt-develoracle-linux-upgrade-abrt-guioracle-linux-upgrade-abrt-gui-develoracle-linux-upgrade-abrt-gui-libsoracle-linux-upgrade-abrt-libsoracle-linux-upgrade-abrt-pythonoracle-linux-upgrade-abrt-python-docoracle-linux-upgrade-abrt-retrace-clientoracle-linux-upgrade-abrt-tuioracle-linux-upgrade-libreportoracle-linux-upgrade-libreport-anacondaoracle-linux-upgrade-libreport-clioracle-linux-upgrade-libreport-compatoracle-linux-upgrade-libreport-develoracle-linux-upgrade-libreport-filesystemoracle-linux-upgrade-libreport-gtkoracle-linux-upgrade-libreport-gtk-develoracle-linux-upgrade-libreport-newtoracle-linux-upgrade-libreport-plugin-bugzillaoracle-linux-upgrade-libreport-plugin-kerneloopsoracle-linux-upgrade-libreport-plugin-loggeroracle-linux-upgrade-libreport-plugin-mailxoracle-linux-upgrade-libreport-plugin-reportuploaderoracle-linux-upgrade-libreport-plugin-ureportoracle-linux-upgrade-libreport-pythonoracle-linux-upgrade-libreport-rhel-anaconda-bugzillaoracle-linux-upgrade-libreport-rhel-bugzillaoracle-linux-upgrade-libreport-weboracle-linux-upgrade-libreport-web-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.