CVE-2015-3142

CVSS V2 Low 1.9 CVSS V3 Medium 4.7
Description
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
Overview
  • CVE ID
  • CVE-2015-3142
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2017-06-26T15:29:00
  • Last Modified Date
  • 2023-02-13T00:47:37
Weakness Enumerations
CWE URL
CWE-200 http://cwe.mitre.org/data/definitions/200.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:redhat:automatic_bug_reporting_tool:*:*:*:*:*:*:*:* 1 OR 2.1.11
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:M/Au:N/C:P/I:N/A:N
  • Access Vector
  • LOCAL
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 1.9
  • Severity
  • LOW
  • Exploitability Score
  • 3.4
  • Impact Score
  • 2.9
CVSS Version 3
  • Version
  • 3.0
  • Vector String
  • CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
  • Attack Vector
  • LOCAL
  • Attack Compatibility
  • HIGH
  • Privileges Required
  • LOW
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • NONE
  • Base Score
  • 4.7
  • Base Severity
  • MEDIUM
  • Exploitability Score
  • 1
  • Impact Score
  • 3.6
References
Reference URL Reference Tags
http://rhn.redhat.com/errata/RHSA-2015-1083.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1210.html
http://www.openwall.com/lists/oss-security/2015/04/17/5 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/75116 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2015:1083
https://access.redhat.com/errata/RHSA-2015:1210
https://access.redhat.com/security/cve/CVE-2015-3142
https://bugzilla.redhat.com/show_bug.cgi?id=1212818 Issue Tracking Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2015-3142
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3142
History
Created Old Value New Value Data Type Notes
2022-05-10 18:53:00 Added to TrackCVE
2022-12-02 18:05:42 2017-06-26T15:29Z 2017-06-26T15:29:00 CVE Published Date updated
2022-12-02 18:05:42 2018-01-05T02:30:04 CVE Modified Date updated
2022-12-02 18:05:42 Modified Vulnerability Status updated
2023-02-02 21:06:14 2023-02-02T20:20:20 CVE Modified Date updated
2023-02-02 21:06:14 The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application. It was discovered that the kernel-invoked coredump processor provided by ABRT wrote core dumps to files owned by other system users. This could result in information disclosure if an application crashed while its current directory was a directory writable to by other users (such as /tmp). Description updated
2023-02-02 21:06:15 References updated
2023-02-13 01:07:04 2023-02-13T00:47:37 CVE Modified Date updated
2023-02-13 01:07:04 It was discovered that the kernel-invoked coredump processor provided by ABRT wrote core dumps to files owned by other system users. This could result in information disclosure if an application crashed while its current directory was a directory writable to by other users (such as /tmp). The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application. Description updated