Description
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | abrt +10 | 2.0.8-6.el6 | RHSA-2012:0841 |
| RHEL 6 | btparser +2 | 0.16-3.el6 | RHSA-2012:0841 |
| RHEL 6 | libreport +12 | 2.0.9-5.el6 | RHSA-2012:0841 |
| RHEL 6 | python-meh | 0.12.1-3.el6 | RHSA-2012:0841 |
Advisories 1
- RHSA-2012:0841 Red Hat Security Advisory: abrt, libreport, btparser, and python-meh security and bug fix update Red Hat Security Advisories (RHSA) · Aug 27, 2026
References
- 54121 vdb-entry
- RHSA-2012:0841 vendor-advisory
- https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0
- abrt-info-disc(76524) vdb-entry