CVE-2015-3315: redhat automatic_bug_reporting_tool Link Following
Vulnerability summary
CVE-2015-3315 is a high (CVSS 7.8) Link Following vulnerability in redhat automatic_bug_reporting_tool. EPSS estimates a 4.78% chance of exploitation in the next 30 days, higher than 91.8% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 26-06-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.78%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.78% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundAbrt (Fedora 21) - Race Condition
Maturity: weaponized
ABRT - 'raceabrt' Privilege Escalation (Metasploit)
Maturity: weaponized
ABRT raceabrt Privilege Escalation
exploit/linux/local/abrt_raceabrt_priv_esc
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Redhat1 product
1 vendor · 1 product
References
11 links- bugzilla.redhat.com/show_bug.cgi?id=1211835X Refsource CONFIRMIssue TrackingThird Party AdvisoryVDB Entry
- github.com/abrt/abrt/commit/80408e9e24a1c10f85fd969e1853e0f192157f92X Refsource CONFIRMPatchThird Party Advisory
- github.com/abrt/abrt/commit/17cb66b13997b0159b4253b3f5722db79f476d68X Refsource CONFIRMPatchThird Party Advisory
- github.com/abrt/abrt/commit/d6e2f6f128cef4c21cb80941ae674c9842681aa7X Refsource CONFIRMPatchThird Party Advisory
Show all 11 references
- github.com/abrt/abrt/commit/4f2c1ddd3e3b81d2d5146b883115371f1cada9f9X Refsource CONFIRMPatchThird Party Advisory