AB
Product
Automatic Bug Reporting Tool
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 4Low 1
Watch
Add Automatic Bug Reporting Tool to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5287 In wildKEV | 7.8 | Dec 7 | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Affected: through 2.7.0 |
| CVE-2026-54230 | 7.8 | Jun 13 | Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites Affected: All versions, or not specified |
| CVE-2015-3159 | 7.8 | Jan 14 | The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking… Affected: All versions, or not specified |
| CVE-2015-3151 | 7.8 | Jan 14 | Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified… Affected: All versions, or not specified |
| CVE-2015-1869 | 7.8 | Jan 14 | The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file Affected: All versions, or not specified |
| CVE-2015-3315 | 7.8 | Jun 26 | Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1)… Affected: All versions, or not specified |
| CVE-2011-4088 | 7.5 | Jan 31 | ABRT might allow attackers to obtain sensitive information from crash reports Affected: 2.0.6 |
| CVE-2015-3150 | 7.1 | Jan 14 | abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1)… Affected: All versions, or not specified |
| CVE-2015-1862 | 7.0 | Feb 9 | The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced… Affected: through 2.2.0 |
| CVE-2015-3147 | 6.5 | Jan 14 | daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or… Affected: All versions, or not specified |
| CVE-2026-54231 | 5.5 | Jun 13 | Abrt: unsanitized systemd journal content written to dump directory files enables content injection Affected: All versions, or not specified |
| CVE-2015-1870 | 5.5 | Jun 26 | The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain… Affected: through 2.1.11 |
| CVE-2015-3142 | 4.7 | Jun 26 | The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local… Affected: through 2.1.11 |
| CVE-2013-4209 | 3.3 | May 1 | Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums Affected: before 2.1.6 |
| CVE-2015-5273 | – | Dec 7 | The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink… Affected: through 2.7.0 |
| CVE-2012-5660 | – | Mar 12 | abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain… Affected: through 2.0.9; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +6 more |
| CVE-2012-5659 | – | Mar 12 | Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load… Affected: through 2.0.9; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +6 more |
| CVE-2012-1106 | – | Jul 3 | The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs… Affected: through 2.0.7 |
Showing 18