Descrição
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service-s SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.
CVSS 7.8EPSS 0.10300000000000001%Risco 0.79
Ver fonte- Publicação
- 2026-06-13 03:16:21
- Versões afetadas
- unknown
- Tipo
- Software crítico
- Última alteração
- 2026-08-03 13:18:51
- Vetor
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H