CVE-2015-3159 The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, whic...
HighCVSS 7.8
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat automatic bug reporting tool | All versions | No fix listed |
| ABRT | = before 9a4100678fea4d60ec93d35f4c5de2e9ad054f3a | No fix listed |
References
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory