PT-2015-7562 · Sos+3 · Sos+3

Mateusz Guzik · Published 2015-12-11 · Updated 2023-02-13 · CVE-2015-7529

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions SoS versions 3.x

Description The issue allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

Recommendations For SoS version 3.x, consider restricting access to the temporary directory where sosreport files are stored to minimize the risk of exploitation. As a temporary workaround, avoid using the sosreport feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CESA-2016_0152

CESA-2016_0188

CVE-2015-7529

GHSA-3G56-2HH3-35PH

PYSEC-2017-73

RHSA-2016:0152

RHSA-2016:0188

RHSA-2016_0152

RHSA-2016_0188

USN-2845-1

Affected Products

Centos

Red Hat

Sos

Ubuntu

References · 27

• https://github.com/sosreport/sos/issues/696 · Patch
• https://ubuntu.com/security/CVE-2015-7529 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0152.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3925 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2845-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7529 · Security Note
• https://osv.dev/vulnerability/CVE-2015-7529 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0188.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-7529 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-0152.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-7529 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-0188.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2845-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2845-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-7529 · Vendor Advisory