CVE-2015-5287
גבוהה 7.8 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
תיאור (מקור, אנגלית)
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 5% (אחוזון 100) נכון ל-21/9/2026
- CWE
- CWE-59
מוצרים מושפעים
redhat: automatic bug reporting tool; oracle: linux; redhat: enterprise linux; redhat: enterprise linux desktop; redhat: enterprise linux hpc node; redhat: enterprise linux server; redhat: enterprise linux workstation
קישורים
- http://rhn.redhat.com/errata/RHSA-2015-2505.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2505.html Vendor Advisory
- https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e Patch
- https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e Patch
- http://www.openwall.com/lists/oss-security/2015/12/01/1 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=1266837 Exploit
- http://www.openwall.com/lists/oss-security/2015/12/01/1 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=1266837 Exploit
- http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalatio… Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645… Third Party Advisory