Automatic bug reporting tool

This hub aggregates every CVE we track for Automatic bug reporting tool, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Automatic bug reporting tool.

• CVE-2026-54231Abrt: unsanitized systemd journal content written to dump directory files enables content injection5.5Jun 13, 2026
• CVE-2026-54230Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites7.0Jun 13, 2026
• CVE-2011-4088ABRT might allow attackers to obtain sensitive information from crash reports.7.5Jan 31, 2020
• CVE-2015-3159The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, w...7.8Jan 14, 2020
• CVE-2015-3151Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1)...7.8Jan 14, 2020
• CVE-2015-3150abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteEle...7.1Jan 14, 2020
• CVE-2015-3147daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other u...6.5Jan 14, 2020
• CVE-2015-1869The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.7.8Jan 14, 2020
• CVE-2013-4209Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.3.3May 1, 2018
• CVE-2015-1862The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.7.0Feb 9, 2018
• CVE-2015-3315Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /t...7.8Jun 26, 2017
• CVE-2015-3142The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sen...4.7Jun 26, 2017
• CVE-2015-1870The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information ...5.5Jun 26, 2017
• CVE-2015-5287The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable ...KEV7.8Dec 7, 2015
• CVE-2015-5273The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio...3.6Dec 7, 2015