Skip to content
OpenAdvisories

Package · Ubuntu

sosreport

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.8
    CVE-2026-79655

    Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

    A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extract…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2022-2806

    sosreport Exposure of Sensitive Information vulnerability

    It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

    sosreport sosreport sos Ubuntu Azure Linux PyPI
  • High 7.8
    CVE-2015-7529

    SoSReport Predictable Tmp File Names

    sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$dat…

    sosreport sosreport sosreport Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-3925

    sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file po…

    sosreport Ubuntu
  • Unscored —
    CVE-2014-0246

    SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensiti…

    sosreport sosreport Debian Ubuntu