CVE-2015-5287KEV · OVERDUECWE-59

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

High · published December 7, 2015

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 92.2th percentile for exploit probability.

44
days past CISA
deadline
CVSS v3.1
7.8
EPSS
5%
Percentile
92.2
In the wild
Confirmed
What it is

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.05003 · 92.2th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2015-12-07T23:59Z
KEV added
2026-08-26 · due 2026-09-09
Affected products (8)
ProductVersionsFixed in
redhat/automatic_bug_reporting_tool≤ 2.7.0—
oracle/linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linux_desktopall versions—
redhat/enterprise_linux_hpc_nodeall versions—
redhat/enterprise_linux_serverall versions—
redhat/enterprise_linux_workstationall versions—
References (18)
http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2505.html · [email protected]http://www.openwall.com/lists/oss-security/2015/12/01/1 · [email protected]http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · [email protected]http://www.securityfocus.com/bid/78137 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1266837 · [email protected]https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e · [email protected]https://www.exploit-db.com/exploits/38832/ · [email protected]http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2505.html · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2015/12/01/1 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/78137 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1266837 · af854a3a-2127-422b-91ae-364da2661108https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e · af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/38832/ · af854a3a-2127-422b-91ae-364da2661108https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/ · 134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5287 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 26 AUG 00:00Z
    Added to CISA KEV — remediate by Sep 9
    kev
  • 07 DEC 18:00Z
    The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a…
    cvelistv5