Redhat Automatic Bug Reporting Tool vulnerabilities
16 vulnerabilities
Known vulnerabilities in Redhat Automatic Bug Reporting Tool, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-4209redhatautomatic_bug_reporting_tool
EPSS score0.30%
Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.CVE-2015-1869abrtabrt+1EPSS score0.41%
The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.CVE-2015-1862redhatautomatic_bug_reporting_toolEPSS score3.02%
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.CVE-2015-1870redhatautomatic_bug_reporting_toolEPSS score0.42%
The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.CVE-2015-5287oraclelinux+6KEVEPSS score5.00%
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.CVE-2015-5273redhatautomatic_bug_reporting_tool+4EPSS score0.90%
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.CVE-2015-3142redhatautomatic_bug_reporting_toolEPSS score0.34%
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.CVE-2015-3315redhatautomatic_bug_reporting_toolEPSS score4.78%
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.CVE-2015-3151abrtabrt+1EPSS score0.56%
Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.CVE-2015-3159abrtabrt+1EPSS score0.39%
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges.CVE-2015-3150abrtabrt+1EPSS score0.40%
abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method.CVE-2015-3147abrtabrt+7EPSS score1.07%
daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.CVE-2012-1106redhatautomatic_bug_reporting_toolEPSS score0.44%
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.CVE-2012-5659redhatautomatic_bug_reporting_toolEPSS score0.45%
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.CVE-2012-5660redhatautomatic_bug_reporting_toolEPSS score0.31%
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."CVE-2011-4088abrtabrt+5EPSS score1.62%
ABRT might allow attackers to obtain sensitive information from crash reports.