CVE-2015-5287

Advisory lineage Upstream: 0 Downstream: 1
Downstream
RHSA-2015:2505
Analyzed
Published: 07 Dec 2015, 18:00
Last modified:26 Aug 2026, 19:58

Vulnerability Summary

Overall Risk (default)
medium
42/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
3.41% LOW
3% probability -9.49%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
6 found
Dark Web
Not detected

Timeline

07 Dec 2015, 18:00
Published
Vulnerability first disclosed
26 Aug 2026, 00:00
Added to CISA KEV
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
26 Aug 2026, 19:58
Last Modified
Vulnerability information updated
09 Sept 2026, 00:00
CISA Remediation Due
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Description

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 6.9AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 3.41%• Percentile: 88%

Techniques & Countermeasures

  • CWE-59•Improper Link Resolution Before File Access ('Link Following')

    The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected Systems

  • oracle•linux

    7

  • redhat•automatic_bug_reporting_tool

    ≤ 2.7.0

  • redhat•enterprise_linux

    6.0 | 7.0

  • redhat•enterprise_linux_desktop

    7.0

  • redhat•enterprise_linux_hpc_node

    7.0

  • redhat•enterprise_linux_server

    7.0

  • redhat•enterprise_linux_workstation

    7.0

References (10)