CVE-2015-1862 Information

Description

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.

CVSS Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

http://packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html http://packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Exploit.html http://packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink.html http://seclists.org/fulldisclosure/2015/Apr/34 http://www.openwall.com/lists/oss-security/2015/04/14/4 http://www.securityfocus.com/bid/74263 https://bugzilla.redhat.com/show_bug.cgi?id=1211223 https://github.com/abrt/abrt/pull/810 https://www.exploit-db.com/exploits/36746/ https://www.exploit-db.com/exploits/36747/

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

7.0