CVE-2015-5287
Fixed in a distro release ExploitedEPSS 5%CVSS 7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
Products: redhat automatic_bug_reporting_tool, oracle linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | abrt | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-ccpp | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-kerneloops | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-pstoreoops | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-python | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-upload-watch | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-vmcore | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-addon-xorg | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-cli | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-console-notification | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-dbus | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-debuginfo | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-desktop | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-devel | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-gui | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-gui-devel | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-gui-libs | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-libs | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-python | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-python-doc | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-retrace-client | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | abrt-tui | 0:2.1.11-35.el7 |
| Red Hat Enterprise Linux 7 | libreport | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-anaconda | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-cli | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-compat | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-debuginfo | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-devel | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-filesystem | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-gtk | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-gtk-devel | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-newt | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-bugzilla | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-kerneloops | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-logger | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-mailx | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-reportuploader | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-rhtsupport | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-plugin-ureport | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-python | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-rhel | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-rhel-anaconda-bugzilla | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-rhel-bugzilla | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-web | 0:2.1.11-31.el7 |
| Red Hat Enterprise Linux 7 | libreport-web-devel | 0:2.1.11-31.el7 |