CVE-2015-7529

High

Published: 06/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory.

Risk Assessment

The organization may be exposed to the disclosure of confidential data and unauthorized privilege escalation by local users.

Recommendation

It is recommended to upgrade to a newer version of SoS and restrict access to temporary directories for local users.

Other vulnerabilities in SoS 3.x

CVE-2026-79655High
A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink targets are not properly validated. This enables the attacker to write files to arbitrary locations on the system with the privileges of the sos clean process, which often runs as root.

Original NVD description (English source)

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.