redhat automatic bug reporting tool güvenlik açıkları (CVE)

redhat automatic bug reporting tool için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç

5.5Orta

CVE-2026-54231 5 ay önce

Abrt: unsanitized systemd journal content written to dump directory files enables content injection

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without san…

7.0Yüksek

CVE-2026-54230 5 ay önce

Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process run…

7.8Yüksek

CVE-2015-5287 KEV 10 yıl önce

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

redhat automatic bug reporting tool; oracle linux; redhat enterprise linux; redhat enterprise linux desktop

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /v…

5.0%EPSS