https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:05:57 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:22760 <p><strong>Affected:</strong> AlmaLinux:8: abrt, AlmaLinux:8: abrt-addon-ccpp, AlmaLinux:8: abrt-addon-coredump-helper, AlmaLinux:8: abrt-addon-kerneloops, AlmaLinux:8: abrt-addon-pstoreoops, AlmaLinux:8: abrt-addon-vmcore, AlmaLinux:8: abrt-addon-xorg, AlmaLinux:8: abrt-cli, AlmaLinux:8: abrt-cli-ng, AlmaLinux:8: abrt-console-notification and 12 more</p> <p>The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.</p> <p>Security Fix(es):</p> <p>* abrt: Command-injection in ABRT leading to local privilege escalation (CVE-2025-12744)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: abrt, AlmaLinux:8: abrt-addon-ccpp, AlmaLinux:8: abrt-addon-coredump-helper, AlmaLinux:8: abrt-addon-kerneloops, AlmaLinux:8: abrt-addon-pstoreoops, AlmaLinux:8: abrt-addon-vmcore, AlmaLinux:8: abrt-addon-xorg, AlmaLinux:8: abrt-cli, AlmaLinux:8: abrt-cli-ng, AlmaLinux:8: abrt-console-notification and 12 more</p> <p>The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.</p> <p>Security Fix(es):</p> <p>* abrt: Command-injection in ABRT leading to local privilege escalation (CVE-2025-12744)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:22760 https://cve.radiocsirt.org/vuln/euvd-2026-262387 EUVD-2026-262387 https://cve.radiocsirt.org/vuln/euvd-2026-262387 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12744 <p>A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.</p> <p>A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12744 https://cve.radiocsirt.org/vuln/ghsa-vwhf-x6j3-3qfg <p>A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.</p> <p>A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-vwhf-x6j3-3qfg https://cve.radiocsirt.org/vuln/rhsa-2025:22760 <p>abrt: Command-injection in ABRT leading to local privilege escalation</p> <p>abrt: Command-injection in ABRT leading to local privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2025:22760 https://cve.radiocsirt.org/vuln/rhsa-2025:23030 <p>abrt: Command-injection in ABRT leading to local privilege escalation</p> <p>abrt: Command-injection in ABRT leading to local privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2025:23030 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2748 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (ABRT) ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (ABRT) ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2748