CVE-2015-3142 | BDVDB-2026-86879 Detail

Description#

The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2015-1083.html
https://bugzilla.redhat.com/show_bug.cgi?id=1212818
http://www.openwall.com/lists/oss-security/2015/04/17/5
http://www.securityfocus.com/bid/75116
http://rhn.redhat.com/errata/RHSA-2015-1210.html

Exploit#

No public exploit known

History#

Version 12017-06-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.