CVE-2015-1862
טרם דורגה
תיאור (מקור, אנגלית)
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.
מדדים
- EPSS — סבירות ניצול
- 3% (אחוזון 100) נכון ל-16/9/2026
- CWE
- CWE-362
מוצרים מושפעים
redhat: automatic bug reporting tool
קישורים
- https://github.com/abrt/abrt/pull/810 Issue TrackingPatchThird Party Advisory
- https://github.com/abrt/abrt/pull/810 Issue TrackingPatchThird Party Advisory
- http://packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Explo… ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink… ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/36746/ ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/36747/ ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Explo… ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink… ExploitThird Party AdvisoryVDB Entry