CVE-2012-5659
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in...
CVE-2012-5659 is a low vulnerability (CVSS 3.7) in Redhat Automatic Bug Reporting Tool, published March 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 38th percentile. Fixed in abrt 0:2.0.8-6.el6_3.2.
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
Exploit likelihood
What each source reports
NVD Score used
3.7
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
- Record
CVE-2012-5659- CVSS 2.0
- 3.7 Low
AV:L/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
- Record
CVE-2012-5659- Updated
- 2026-11-02
EUVDEUVD-2012-5542 No score
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
- Record
EUVD-2012-5542- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p65h-g398-8mm3 No score
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in...
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
- Record
GHSA-p65h-g398-8mm3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
abrtRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
Show 94 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libreportRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrtRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreportRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrtRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreportRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrtRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreportRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=854011
rhn.redhat.com/errata/RHSA-2013-0215.html
git.fedorahosted.org/cgit/abrt.git/commit?id=b173d81b577953b96a282167c7eecd66bf111a4f
nvd.nist.gov/vuln/detail/CVE-2012-5659
github.com/advisories/GHSA-p65h-g398-8mm3
access.redhat.com/errata/RHSA-2013:0215
Show 8 moreShow less
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=887866
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0215.json
access.redhat.com/security/cve/CVE-2012-5659
cve.org/CVERecord?id=CVE-2012-5659
access.redhat.com/security/cve/CVE-2012-5660
cve.org/CVERecord?id=CVE-2012-5660
nvd.nist.gov/vuln/detail/CVE-2012-5660