CVE-2015-1862: redhat automatic_bug_reporting_tool Race Condition

CVSS: 7.0v3.0HighModified

Published 09-02-2018Last modified 06-08-2024

Vulnerability summary

CVE-2015-1862 is a high (CVSS 7.0) Race Condition vulnerability in redhat automatic_bug_reporting_tool. EPSS estimates a 3.02% chance of exploitation in the next 30 days, higher than 87.2% of scored vulnerabilities. 5 public exploits are recorded.

Overall risk

39/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.0/10

010

High · v3.0 (NVD)

EPSS score

3.02%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits5reference, exploit-database

Timeline

09-02-2018
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.

CVSS metrics

2 scores · 1 source · 2 versions

v3.07.0v2.06.9

EPSS trend

Probability

3.02%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

0.00 pp

From 3.02% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.02%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

5 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown

Show all 5 exploits

exploit-databaselocallinuxVerified
Abrt (Fedora 21) - Race Condition
Maturity: weaponized
exploit-databaselocallinuxVerified
Apport/Abrt (Ubuntu / Fedora) - Local Privilege Escalation
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Redhat1 product

automatic_bug_reporting_tool≤ 2.2.0

1 vendor · 1 product

References

10 links

bugzilla.redhat.com/show_bug.cgi?id=1211223X Refsource CONFIRMIssue TrackingThird Party Advisory
www.openwall.com/lists/oss-security/2015/04/14/4Mailing ListX Refsource MLIST
packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/36746/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/74263VDB EntryX Refsource BIDThird Party Advisory
www.exploit-db.com/exploits/36747/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
github.com/abrt/abrt/pull/810X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Exploit.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2015/Apr/34Mailing ListX Refsource FULLDISCThird Party Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities