Local privilege escalation in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows a local user to overwrite arbitrary files by pre-placing a symlink at a predictable coredump path, causing the elevated-privilege ccpp hook to follow the symlink and write attacker-controlled data to the target. Affected systems include RHEL 7.0 Desktop, Server, HPC Node, and Workstation deployments where ABRT is installed by default. This vulnerability is confirmed actively exploited per CISA KEV, has a public exploit on Exploit-DB (#38832), and sits at the 94th EPSS percentile, making it a genuine remediation priority on any RHEL 7 system.
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the (1). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
The do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.