Description
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service-s SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.
CVSS 7.8EPSS 0.10300000000000001%Risk 0.79
View source- Published
- 2026-06-13 03:16:21
- Affected versions
- unknown
- Type
- Critical software
- Last modified
- 2026-08-03 13:18:51
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H