Popis
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service-s SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.
CVSS 7.8EPSS 0.10300000000000001%Riziko 0.79
Zobraziť zdroj- Zverejnené
- 2026-06-13 03:16:21
- Dotknuté verzie
- unknown
- Typ
- Kritický softvér
- Posledná úprava
- 2026-08-03 13:18:51
- Vektor
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H