debian/sosreport vulnerabilities

Latest debian/sosreport CVEs

Newest publication first

1. CVE-2015-7529 SoSReport Predictable Tmp File Names

   Published 2017-11-06

   High·CVSS 7.8 EPSS 0.44%

   sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

2. CVE-2015-3171 sosreport sensitive information disclosure via weak permissions of the generated archives

   Published 2017-07-25

   Medium·CVSS 5.5 EPSS 0.34%

   sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.

3. CVE-2014-3925 sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing thi...

   Published 2014-06-01

   Medium·CVSS 5.0 EPSS 2.2%

   sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to ob...

4. CVE-2014-0246 SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive.

   Published 2014-05-29

   Medium·CVSS 4.3 EPSS 1.3%

   SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.