A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This allows a local attacker to read environment variables and related metadata of other users' or root processes when abrtd is running.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
Disable or remove ABRT if not required: systemctl disable --now abrtd.service abrt-journal-core.service abrt-oops.service abrt-xorg.service. Restrict local interactive user access on systems that keep abrtd enabled.
References
History
Fri, 13 Nov 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This allows a local attacker to read environment variables and related metadata of other users' or root processes when abrtd is running. | |
| Title | Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ | |
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat rhel Els |
|
| Weaknesses | CWE-862 | |
| CPEs | cpe:/a:redhat:enterprise_linux:8 cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat rhel Els |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2026-11-13T21:26:06.206Z
Reserved: 2026-10-13T20:26:13.525Z
Link: CVE-2026-110330
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses