Description
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service-s SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.
CVSS 7.8EPSS 0.10300000000000001%Risque 0.79
Voir la source- Publication
- 2026-06-13 03:16:21
- Versions concernées
- unknown
- Type
- Logiciel critique
- Dernière modification
- 2026-08-03 13:18:51
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H