Information Disclosure

2019-01-1509:08:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.006 Low

EPSS

Percentile

78.4%

JSON

libreport is vulnerable to information disclosure. Changes made by a user in files that are included in a crash report are discarded when the dump directory’s files are reviewed during crash reporting. This allows remote attackers to obtain confidential information such as host names, IP addresses or command line options.

CPENameOperatorVersion
libreporteq2.0.9__21.el6
libreporteq2.0.9__24.el6
libreporteq2.0.5__20.el6
libreporteq2.0.9__5.el6
libreporteq2.0.9__21.el6_6.1
libreporteq2.0.9__15.el6_4.1
libreporteq2.0.9__15.el6
libreporteq2.0.9__19.el6
libreporteq2.0.9__5.el6_3.2
libreporteq2.0.9__21.el6

Name	Operator	Version
libreport	eq	2.0.9__21.el6
libreport	eq	2.0.9__24.el6
libreport	eq	2.0.5__20.el6
libreport	eq	2.0.9__5.el6
libreport	eq	2.0.9__21.el6_6.1
libreport	eq	2.0.9__15.el6_4.1
libreport	eq	2.0.9__15.el6
libreport	eq	2.0.9__19.el6
libreport	eq	2.0.9__5.el6_3.2
libreport	eq	2.0.9__21.el6