Skip to content
OpenAdvisories

Package · Debian

sosreport

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.8
    CVE-2015-7529

    SoSReport Predictable Tmp File Names

    sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$dat…

    sosreport sosreport sosreport Debian Ubuntu PyPI
  • Medium 5.5
    CVE-2015-3171

    sosreport sensitive information disclosure via weak permissions of the generated archives

    sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.

    sosreport sosreport Debian PyPI
  • Unscored —
    CVE-2014-0246

    SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensiti…

    sosreport sosreport Debian Ubuntu