| Package | Affected versions | Patched versions |
|---|---|---|
| libreport | = 2.0.10= 2.0.14= 2.0.16= 2.0.19= 2.0.20= 2.0.8= 2.0.9= 2.1.0= 2.1.1= 2.1.10= 2.1.11= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.8= 2.1.9= 2.2.2= 2.2.3= 2.3.0= 2.5.1= 2.6.2 |
libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the (1) backtrace, (2) cmdline, (3) environ, (4) open_fds, (5) maps, (6) smaps, (7) hostname, (8) remote, (9) ks.cfg, or (10) anaconda-tb file attachment included in a Red Hat Bugzilla bug report.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free