CVE-2015-3315
Fixed in a distro release EPSS 5%
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
Products: redhat automatic_bug_reporting_tool
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | abrt | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-addon-ccpp | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-addon-kerneloops | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-addon-python | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-addon-vmcore | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-cli | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-console-notification | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-debuginfo | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-desktop | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-devel | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-gui | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-libs | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-python | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | abrt-tui | 0:2.0.8-26.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-cli | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-compat | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-debuginfo | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-devel | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-filesystem | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-gtk | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-gtk-devel | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-newt | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-plugin-bugzilla | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-plugin-kerneloops | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-plugin-logger | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-plugin-mailx | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-plugin-reportuploader | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-plugin-rhtsupport | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 6 | libreport-python | 0:2.0.9-21.el6_6.1 |
| Red Hat Enterprise Linux 7 | abrt | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-ccpp | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-ccpp | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-kerneloops | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-kerneloops | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-pstoreoops | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-pstoreoops | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-python | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-python | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-upload-watch | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-upload-watch | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-vmcore | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-vmcore | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-xorg | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-addon-xorg | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-cli | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-cli | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-console-notification | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-console-notification | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-dbus | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-dbus | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-debuginfo | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-debuginfo | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-desktop | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-desktop | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-devel | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-devel | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-gui | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-gui | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-gui-devel | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-gui-devel | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-gui-libs | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-gui-libs | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-libs | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-libs | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-python | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-python | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-python-doc | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-python-doc | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-retrace-client | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | abrt-retrace-client | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-tui | 0:2.1.11-22.ael7b_1 |
| Red Hat Enterprise Linux 7 | abrt-tui | 0:2.1.11-22.el7_1 |
| Red Hat Enterprise Linux 7 | libreport | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-anaconda | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-anaconda | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-cli | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-cli | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-compat | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-compat | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-debuginfo | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-debuginfo | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-devel | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-devel | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-filesystem | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-filesystem | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-gtk | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-gtk | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-gtk-devel | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-gtk-devel | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-newt | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-newt | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-bugzilla | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-bugzilla | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-kerneloops | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-kerneloops | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-logger | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-logger | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-mailx | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-mailx | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-reportuploader | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-reportuploader | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-rhtsupport | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-rhtsupport | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-ureport | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-plugin-ureport | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-python | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-python | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-rhel | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-rhel | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-rhel-anaconda-bugzilla | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-rhel-anaconda-bugzilla | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-rhel-bugzilla | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-rhel-bugzilla | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-web | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-web | 0:2.1.11-23.ael7b_1 |
| Red Hat Enterprise Linux 7 | libreport-web-devel | 0:2.1.11-23.el7_1 |
| Red Hat Enterprise Linux 7 | libreport-web-devel | 0:2.1.11-23.ael7b_1 |