Description
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | abrt +20 | 2.1.11-22.ael7b_1 | RHSA-2015:1083 |
| RHEL 7 | libreport +21 | 2.1.11-23.ael7b_1 | RHSA-2015:1083 |
| RHEL 6 | abrt +12 | 2.0.8-26.el6_6.1 | RHSA-2015:1210 |
| RHEL 6 | libreport +14 | 2.0.9-21.el6_6.1 | RHSA-2015:1210 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | abrt +20 | 2.1.11-22.0.1.el7_1 | ELSA-2015-1083 |
| Oracle Linux 7 | libreport +19 | 2.1.11-23.0.1.el7_1 | ELSA-2015-1083 |
Advisories 3
- RHSA-2015:1210 Red Hat Security Advisory: abrt security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2015:1083 Red Hat Security Advisory: abrt security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- ELSA-2015-1083 Important: abrt security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jun 9, 2015
References
- RHSA-2015:1083 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1212818
- [oss-security] 20150417 Re: Problems in automatic crash analysis frameworks mailing-list
- 75116 vdb-entry
- RHSA-2015:1210 vendor-advisory