Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:automatic_bug_reporting_tool:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductAutomatic Bug Reporting Tool (ff7fcf15-07c8-5594-adbb-05517b674865)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5287 vulnerable 2026-06-08 05:06:49.447878 Details available
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
Published: 2015-12-07T18:00:00.000Z
Updated: 2024-08-06T06:41:09.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5273 vulnerable 2026-06-08 05:06:49.415909 Details available
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.
Published: 2015-12-07T18:00:00.000Z
Updated: 2024-08-06T06:41:09.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3142 vulnerable 2026-06-08 05:06:37.185494 Details available
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
Published: 2017-06-26T15:00:00.000Z
Updated: 2024-08-06T05:39:31.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1870 vulnerable 2026-06-08 05:06:26.509487 Details available
The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.
Published: 2017-06-26T15:00:00.000Z
Updated: 2024-08-06T04:54:16.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4209 vulnerable 2026-06-08 05:04:34.621880 Details available
Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.
Published: 2018-05-01T19:00:00.000Z
Updated: 2024-08-06T16:38:01.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5660 vulnerable 2026-06-08 05:02:57.874942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5659 vulnerable 2026-06-08 05:02:57.868742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1106 vulnerable 2026-06-08 05:00:47.487630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.