CVE-2015-5273
Fixed in a distro release EPSS <1%
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.
Products: redhat automatic_bug_reporting_tool, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | abrt | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-ccpp | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-kerneloops | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-pstoreoops | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-python | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-upload-watch | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-vmcore | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-xorg | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-cli | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-console-notification | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-dbus | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-debuginfo | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-desktop | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-devel | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-gui | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-gui-devel | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-gui-libs | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-libs | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-python | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-python-doc | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-retrace-client | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-tui | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | libreport | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-anaconda | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-cli | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-compat | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-debuginfo | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-devel | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-filesystem | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-gtk | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-gtk-devel | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-newt | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-bugzilla | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-kerneloops | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-logger | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-mailx | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-reportuploader | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-rhtsupport | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-ureport | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-python | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-rhel | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-rhel-anaconda-bugzilla | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-rhel-bugzilla | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-web | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-web-devel | 0:2.1.11-31.el7 |