CVE-2015-3142
Last modified
CVE-2015-3142 is a vulnerability of currently unknown severity. The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application..
Description
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Automatic Bug Reporting Tool | <= 2.1.11 |
References
- http://rhn.redhat.com/errata/RHSA-2015-1083.htmlVendor Advisory
- http://www.openwall.com/lists/oss-security/2015/04/17/5Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/75116Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1212818Issue Tracking, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1083.htmlVendor Advisory
- http://www.openwall.com/lists/oss-security/2015/04/17/5Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/75116Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1212818Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-3142?
How severe is CVE-2015-3142?
How do I fix CVE-2015-3142?
Are you affected by CVE-2015-3142?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST