Automatic Bug Reporting Tool (Redhat) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 134 known versions, newest CVE from 2026-06-13. Vendor: Redhat.
CVEs of Automatic Bug Reporting Tool
- CVE-2026-54231 - CVSS 5.5 (medium), 2026-06-13: A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log…
- CVE-2026-54230 - CVSS 7.8 (high), 2026-06-13: A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell…
- CVE-2011-4088 - CVSS 7.5 (high), 2020-01-31: ABRT might allow attackers to obtain sensitive information from crash reports.
- CVE-2015-3159 - CVSS 7.8 (high), 2020-01-14: The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before…
- CVE-2015-1869 - CVSS 7.8 (high), 2020-01-14: The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a…
- CVE-2015-3151 - CVSS 7.8 (high), 2020-01-14: Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary…
- CVE-2015-3150 - CVSS 7.1 (high), 2020-01-14: abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to…
- CVE-2015-3147 - CVSS 6.5 (medium), 2020-01-14: daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to…
- CVE-2013-4209 - CVSS 3.3 (low), 2018-05-01: Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.
- CVE-2015-1862 - CVSS 7 (high), 2018-02-09: The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a…
- CVE-2015-3315 - CVSS 7.8 (high), 2017-06-26: Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink…
- CVE-2015-3142 - CVSS 4.7 (medium), 2017-06-26: The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them,…
- CVE-2015-1870 - CVSS 5.5 (medium), 2017-06-26: The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local…
- CVE-2015-5287 - CVSS 7.8 (high), 2015-12-07: The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a…
- CVE-2015-5273 - CVSS 3.6 (low), 2015-12-07: The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary…
- CVE-2012-5659 - CVSS 3.7 (low), 2013-03-12: Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows…
- CVE-2012-5660 - CVSS 6.9 (medium), 2013-03-12: abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary…
- CVE-2012-1106 - CVSS 1.9 (low), 2012-07-03: The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files…
