Red Hat Security AdvisoryRHSA-2015:1210
abrt security update
Released 2015-07-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +17
- Red Hat Enterprise Linux Desktop Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-devel-2.0.8-26.el6_6.1 +5
- Red Hat Enterprise Linux HPC Node (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +13
- Red Hat Enterprise Linux HPC Node Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-desktop-2.0.8-26.el6_6.1 +9
- Red Hat Enterprise Linux Server (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +20
- Red Hat Enterprise Linux Server Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-devel-2.0.8-26.el6_6.1 +8
- Red Hat Enterprise Linux Workstation (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +17
- Red Hat Enterprise Linux Workstation Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-devel-2.0.8-26.el6_6.1 +5
Fixes 6 records
Priority MEDIUM 42
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log,…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04776 · Published 2017-06-26 · Fixed CWE-59
Priority LOW 34
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00388 · Published 2020-01-14 · Fixed in 9a4100678fea4d60ec93d35f4c5de2e9ad054f3a
Priority LOW 34
The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00411 · Published 2020-01-14 · Fixed in 7417505e1d93cc95ec648b74e3c801bc67aacb9f CWE-59
Priority LOW 31
daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01066 · Published 2020-01-14 · Fixed in 2.6.0 CWE-59
Priority LOW 25
The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00421 · Published 2017-06-26 · Fixed CWE-200
Priority LOW 22
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by l…
CVSS 3.0MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00345 · Published 2017-06-26 · Fixed CWE-200
THREATIST.IORead the docs