CVE-2015-3142: Infoleak
It was discovered that the kernel-invoked coredump processor provided by abrt writes core dumps to files owned by other system users. This could result in information disclosure if an application crashes while its current directory is a directory writable to other users (such as /tmp).
Acknowledgement:
This issue was discovered by Florian Weimer of Red Hat Product Security.
Other sources
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3142?
CVE-2015-3142 is rated as having a moderate severity level due to potential information disclosure risks.
How can I fix CVE-2015-3142?
To fix CVE-2015-3142, update the Red Hat Automatic Bug Reporting Tool to version 2.1.11 or later.
What systems are affected by CVE-2015-3142?
CVE-2015-3142 affects versions of the Red Hat Automatic Bug Reporting Tool prior to 2.1.11.
What kind of vulnerability is CVE-2015-3142?
CVE-2015-3142 is an information disclosure vulnerability arising from improper handling of core dump files.
Can CVE-2015-3142 lead to unauthorized access?
Yes, CVE-2015-3142 can potentially allow unauthorized users to access sensitive data from core dumps.