EUVD-2026-125779

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data including environ into a dump directory owned by the connecting unprivileged user. This allows a local attacker to read environmen...

EUVD-2026-125778

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard and again poison elements in, or seize...

CVE-2015-5287

CVE-2015-5287 RHEL 7.0/7.1 - 'abrt/sosreport' Local Privilege Escalation Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️...

CVE-2026-110330

The abrt-server component in abrt is vulnerable to a flaw where it trusts a client-supplied PID when creating problem dumps over abrt.socket . Because abrtd runs as root , it copies the /proc data (including environment variables ) of the specified process into a dump directory owned by the unpri...

CVE-2026-110330

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data including environ into a dump directory owned by the connecting unprivileged user. This allows a local attacker to read environmen...

CVE-2026-110331

A flaw exists in abrt where the completeness check intended to mitigate CVE-2026-54228 and CVE-2026-54229 is insufficient. The check only verifies the presence of a "count" element , which an unprivileged user can create. This allows a local attacker to bypass the guard and poison elements or sei...

CVE-2026-110331

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard and again poison elements in, or seize...

abrt_root

Overview This repository contains an exploit PoC for CVE-2025-12744, a local privilege escalation vulnerability in default installations of Fedora Linux versions 43 and below, both Desktop and Server. The flaw stems from a command injection in the ABRT daemon, allowing any local user to gain root...

TencentOS Server 2: abrt (TSSA-2026:1088)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1088 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Rocky Linux 8 [CIQ] Security Update: abrt / abrt-addon-ccpp / abrt-addon-ccpp-debuginfo / etc (crlsa-2025_22760)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202522760 advisory. abrt: Command-injection in ABRT leading to local privilege escalation CVE-2025-12744 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: abrt / abrt-addon-ccpp / abrt-addon-ccpp-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_54272)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654272 advisory. abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories CVE-2026-54228 abrt: ChownProblemDir succeeds during...

Rocky Linux 8 [CIQ] Security Update: ruby / ruby-debuginfo / ruby-debugsource / ruby-devel / ruby-doc / etc Multiple Vulnerabilities (crlsa-2026_73519)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202673519 advisory. resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 rubygem-mongo: MongoDB Ruby Driver: Data...

Rocky Linux 8 [CIQ] Security Update: rubygem-abrt / rubygem-abrt-doc / rubygem-bson / etc Multiple Vulnerabilities (crlba-2019_3384)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlba-20193384 advisory. For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section. This advisory is provided by...

ruby:3.3 security update

An update is available for rubygem-pg, ruby, module.rubygem-pg, module.rubygem-abrt, module.ruby, module.rubygem-mysql2, rubygem-abrt, rubygem-mysql2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Oracle Linux 7 : abrt (ELSA-2026-48866)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48866 advisory. - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 7 : abrt (ELSA-2026-69121)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69121 advisory. - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenabl...

abrt security update

2.1.11-60.0.7 - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...

abrt security update

2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...

TencentOS Server 2: abrt (TSSA-2026:1063)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1063 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Important: Red Hat Security Advisory: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...