Skip to content
OpenAdvisories
Unscored CVE-2011-4088 EUVD-2011-4039GHSA-pvpf-wrvr-qvg2

ABRT might allow attackers to obtain sensitive information from crash reports.

Published Jan 31, 2020 · Updated Aug 6, 2024 · Assigned by redhat

Description

ABRT might allow attackers to obtain sensitive information from crash reports.

Affected products

VendorProductAffectedFixed
ABRT ABRT 2.0.8 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
RHEL 6 abrt +10 2.0.8-6.el6 RHSA-2012:0841
RHEL 6 btparser +2 0.16-3.el6 RHSA-2012:0841
RHEL 6 libreport +12 2.0.9-5.el6 RHSA-2012:0841
RHEL 6 python-meh 0.12.1-3.el6 RHSA-2012:0841

Advisories 1

References