Summary
The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.
Security Fix(es):
* abrt: Command-injection in ABRT leading to local privilege escalation (CVE-2025-12744)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | abrt | 0:2.10.9-25.el8_10.rocky.0.1 |
Vulnerabilities 1
-
High 8.8CVE-2025-12744 Public exploit
Abrt: command-injection in abrt leading to local privilege escalation
A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user c…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2412467