CVE-2015-1870

Fixed in a distro release EPSS <1%

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

Published 2017-06-26 · CVE record · OSV

Products: redhat automatic_bug_reporting_tool

Distro releases

Release	Package	Fixed in
Red Hat Enterprise Linux 6	abrt	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-addon-ccpp	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-addon-kerneloops	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-addon-python	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-addon-vmcore	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-cli	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-console-notification	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-debuginfo	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-desktop	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-devel	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-gui	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-libs	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-python	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	abrt-tui	0:2.0.8-26.el6_6.1
Red Hat Enterprise Linux 6	libreport	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-cli	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-compat	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-debuginfo	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-devel	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-filesystem	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-gtk	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-gtk-devel	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-newt	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-plugin-bugzilla	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-plugin-kerneloops	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-plugin-logger	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-plugin-mailx	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-plugin-reportuploader	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-plugin-rhtsupport	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 6	libreport-python	0:2.0.9-21.el6_6.1
Red Hat Enterprise Linux 7	abrt	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-ccpp	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-addon-ccpp	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-kerneloops	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-addon-kerneloops	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-pstoreoops	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-addon-pstoreoops	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-python	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-python	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-addon-upload-watch	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-addon-upload-watch	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-vmcore	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-vmcore	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-addon-xorg	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-addon-xorg	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-cli	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-cli	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-console-notification	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-console-notification	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-dbus	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-dbus	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-debuginfo	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-debuginfo	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-desktop	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-desktop	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-devel	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-devel	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-gui	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-gui	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-gui-devel	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-gui-devel	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-gui-libs	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-gui-libs	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-libs	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-libs	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-python	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-python	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-python-doc	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-python-doc	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-retrace-client	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	abrt-retrace-client	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-tui	0:2.1.11-22.ael7b_1
Red Hat Enterprise Linux 7	abrt-tui	0:2.1.11-22.el7_1
Red Hat Enterprise Linux 7	libreport	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-anaconda	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-anaconda	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-cli	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-cli	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-compat	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-compat	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-debuginfo	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-debuginfo	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-devel	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-devel	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-filesystem	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-filesystem	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-gtk	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-gtk	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-gtk-devel	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-gtk-devel	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-newt	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-newt	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-bugzilla	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-bugzilla	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-plugin-kerneloops	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-kerneloops	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-plugin-logger	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-logger	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-plugin-mailx	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-mailx	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-plugin-reportuploader	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-reportuploader	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-plugin-rhtsupport	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-rhtsupport	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-plugin-ureport	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-plugin-ureport	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-python	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-python	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-rhel	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-rhel	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-rhel-anaconda-bugzilla	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-rhel-anaconda-bugzilla	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-rhel-bugzilla	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-rhel-bugzilla	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-web	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-web	0:2.1.11-23.ael7b_1
Red Hat Enterprise Linux 7	libreport-web-devel	0:2.1.11-23.el7_1
Red Hat Enterprise Linux 7	libreport-web-devel	0:2.1.11-23.ael7b_1