← All credits

Red Hat would like to thank Red Team (Deutsche Telekom Security GmbH) for reporting this issue.

4 vulnerability records and advisories credit this contributor.

Abrt: unsanitized systemd journal content written to dump directory files enables content injection

Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories

Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking