CVE-2011-4088

ABRT might allow attackers to obtain sensitive information from crash reports.

7.5 HighFix available

CVE-2011-4088 is a high vulnerability (CVSS 7.5) in Abrt, published January 31, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. Fixed in abrt 0:2.0.8-6.el6.

ABRT might allow attackers to obtain sensitive information from crash reports.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.63%Up 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

ABRT might allow attackers to obtain sensitive information from crash reports.

Record: CVE-2011-4088
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

ABRT might allow attackers to obtain sensitive information from crash reports.

Record: CVE-2011-4088
Updated: 2026-11-02

EUVDEUVD-2011-4039 No score

ABRT might allow attackers to obtain sensitive information from crash reports.

Record: EUVD-2011-4039
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pvpf-wrvr-qvg2 7.5

ABRT might allow attackers to obtain sensitive information from crash reports.

ABRT might allow attackers to obtain sensitive information from crash reports.

Record: GHSA-pvpf-wrvr-qvg2
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`abrt` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-vmcore` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-devel` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`btparser` Red Hat:enterprise_linux:6::client	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-debuginfo` Red Hat:enterprise_linux:6::client	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-devel` Red Hat:enterprise_linux:6::client	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-python` Red Hat:enterprise_linux:6::client	before 0:0.16-3.el6	0:0.16-3.el6
`libreport` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6

Show 114 moreShow less

Affected packages
Package	Affected	Fixed
`libreport-devel` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk-devel` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-bugzilla` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`abrt-addon-ccpp` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-kerneloops` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-python` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-cli` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-desktop` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-gui` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-libs` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-tui` Red Hat:enterprise_linux:6::client	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`libreport-cli` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-newt` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-kerneloops` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-logger` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-mailx` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-reportuploader` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-rhtsupport` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-python` Red Hat:enterprise_linux:6::client	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`python-meh` Red Hat:enterprise_linux:6::client	before 0:0.12.1-3.el6	0:0.12.1-3.el6
`abrt` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-vmcore` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-desktop` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-devel` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-gui` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`btparser` Red Hat:enterprise_linux:6::computenode	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-devel` Red Hat:enterprise_linux:6::computenode	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-python` Red Hat:enterprise_linux:6::computenode	before 0:0.16-3.el6	0:0.16-3.el6
`libreport` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-devel` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk-devel` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-newt` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-bugzilla` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`python-meh` Red Hat:enterprise_linux:6::computenode	before 0:0.12.1-3.el6	0:0.12.1-3.el6
`abrt-addon-ccpp` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-kerneloops` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-python` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-cli` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-libs` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-tui` Red Hat:enterprise_linux:6::computenode	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`libreport-cli` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-kerneloops` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-logger` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-mailx` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-reportuploader` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-rhtsupport` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-python` Red Hat:enterprise_linux:6::computenode	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`abrt` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-vmcore` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-devel` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`btparser` Red Hat:enterprise_linux:6::server	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-debuginfo` Red Hat:enterprise_linux:6::server	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-devel` Red Hat:enterprise_linux:6::server	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-python` Red Hat:enterprise_linux:6::server	before 0:0.16-3.el6	0:0.16-3.el6
`libreport` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-devel` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk-devel` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-bugzilla` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`abrt-addon-ccpp` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-kerneloops` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-python` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-cli` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-desktop` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-gui` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-libs` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-tui` Red Hat:enterprise_linux:6::server	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`libreport-cli` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-newt` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-kerneloops` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-logger` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-mailx` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-reportuploader` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-rhtsupport` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-python` Red Hat:enterprise_linux:6::server	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`python-meh` Red Hat:enterprise_linux:6::server	before 0:0.12.1-3.el6	0:0.12.1-3.el6
`abrt` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-vmcore` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`btparser` Red Hat:enterprise_linux:6::workstation	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-devel` Red Hat:enterprise_linux:6::workstation	before 0:0.16-3.el6	0:0.16-3.el6
`btparser-python` Red Hat:enterprise_linux:6::workstation	before 0:0.16-3.el6	0:0.16-3.el6
`libreport` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-bugzilla` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`abrt-addon-ccpp` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-kerneloops` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-addon-python` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-cli` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-desktop` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-gui` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-libs` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`abrt-tui` Red Hat:enterprise_linux:6::workstation	before 0:2.0.8-6.el6	0:2.0.8-6.el6
`libreport-cli` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-gtk` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-newt` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-kerneloops` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-logger` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-mailx` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-reportuploader` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-plugin-rhtsupport` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`libreport-python` Red Hat:enterprise_linux:6::workstation	before 0:2.0.9-5.el6	0:2.0.9-5.el6
`python-meh` Red Hat:enterprise_linux:6::workstation	before 0:0.12.1-3.el6	0:0.12.1-3.el6

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 29 moreShow less