Redhat

Automatic Bug Reporting Tool

19 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7

CVE-2015-1862

Exploit
  • EPSS 3.02%
  • Veröffentlicht 09.02.2018 22:29:00
  • Zuletzt bearbeitet 26.08.2026 20:06:00

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.

7.8

CVE-2015-3315

  • EPSS 4.78%
  • Veröffentlicht 26.06.2017 15:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-r...

4.7

CVE-2015-3142

  • EPSS 0.35%
  • Veröffentlicht 26.06.2017 15:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to...

5.5

CVE-2015-1870

  • EPSS 0.42%
  • Veröffentlicht 26.06.2017 15:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

7.8

CVE-2015-5287

Warnung Medienbericht Exploit
  • EPSS 3.27%
  • Veröffentlicht 07.12.2015 18:59:02
  • Zuletzt bearbeitet 27.08.2026 04:16:38

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-cored...

3.6

CVE-2015-5273

Exploit
  • EPSS 0.9%
  • Veröffentlicht 07.12.2015 18:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name i...

6.9

CVE-2012-5660

Exploit
  • EPSS 0.31%
  • Veröffentlicht 12.03.2013 23:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store inform...

3.7

CVE-2012-5659

Exploit
  • EPSS 0.45%
  • Veröffentlicht 12.03.2013 23:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environm...

1.9

CVE-2012-1106

Exploit
  • EPSS 0.44%
  • Veröffentlicht 03.07.2012 16:40:32
  • Zuletzt bearbeitet 16.06.2026 23:39:02

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local...