CVE-2015-5287
High · 7.8 CISA KEVCVSS
7.8
EPSS
5.0%
Published
Dec 7, 2015
CISA due date
Sep 9, 2026
The record
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:7::client | abrt | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-addon-ccpp | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-addon-kerneloops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-addon-pstoreoops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-addon-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-addon-upload-watch | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-addon-vmcore | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-addon-xorg | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-cli | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-console-notification | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-dbus | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-debuginfo | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-desktop | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-gui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-gui-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-gui-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-python-doc | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-retrace-client | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | abrt-tui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::client | libreport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-anaconda | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-cli | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-compat | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-debuginfo | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-filesystem | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-gtk | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-gtk-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-newt | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-plugin-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-plugin-kerneloops | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-plugin-logger | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-plugin-mailx | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-plugin-reportuploader | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-plugin-rhtsupport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-plugin-ureport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-python | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-rhel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-rhel-anaconda-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-rhel-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-web | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::client | libreport-web-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-addon-ccpp | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-addon-kerneloops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-addon-pstoreoops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-addon-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-addon-upload-watch | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-addon-vmcore | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-addon-xorg | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-cli | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-console-notification | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-dbus | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-debuginfo | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-desktop | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-gui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-gui-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-gui-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-python-doc | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-retrace-client | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | abrt-tui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-anaconda | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-cli | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-compat | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-debuginfo | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-filesystem | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-gtk | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-gtk-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-newt | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-plugin-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-plugin-kerneloops | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-plugin-logger | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-plugin-mailx | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-plugin-reportuploader | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-plugin-rhtsupport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-plugin-ureport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-python | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-rhel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-rhel-anaconda-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-rhel-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-web | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::computenode | libreport-web-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | abrt | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-addon-ccpp | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-addon-kerneloops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-addon-pstoreoops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-addon-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-addon-upload-watch | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-addon-vmcore | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-addon-xorg | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-cli | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-console-notification | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-dbus | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-debuginfo | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-desktop | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-gui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-gui-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-gui-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-python-doc | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-retrace-client | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | abrt-tui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::server | libreport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-anaconda | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-cli | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-compat | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-debuginfo | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-filesystem | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-gtk | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-gtk-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-newt | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-plugin-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-plugin-kerneloops | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-plugin-logger | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-plugin-mailx | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-plugin-reportuploader | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-plugin-rhtsupport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-plugin-ureport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-python | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-rhel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-rhel-anaconda-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-rhel-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-web | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::server | libreport-web-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-addon-ccpp | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-addon-kerneloops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-addon-pstoreoops | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-addon-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-addon-upload-watch | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-addon-vmcore | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-addon-xorg | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-cli | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-console-notification | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-dbus | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-debuginfo | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-desktop | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-gui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-gui-devel | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-gui-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-libs | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-python | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-python-doc | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-retrace-client | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | abrt-tui | 0 | 0:2.1.11-35.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-anaconda | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-cli | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-compat | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-debuginfo | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-filesystem | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-gtk | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-gtk-devel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-newt | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-plugin-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-plugin-kerneloops | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-plugin-logger | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-plugin-mailx | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-plugin-reportuploader | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-plugin-rhtsupport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-plugin-ureport | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-python | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-rhel | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-rhel-anaconda-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-rhel-bugzilla | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-web | 0 | 0:2.1.11-31.el7 |
| Red Hat:enterprise_linux:7::workstation | libreport-web-devel | 0 | 0:2.1.11-31.el7 |
Related vulnerabilities
- CVE-2026-113724 virtualenv is a tool for creating isolated virtual python environments. CWE-59
- CVE-2026-113716 virtualenv is a tool for creating isolated virtual python environments. CWE-59
- CVE-2026-55480 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-59
- CVE-2026-90954 A flaw was found in BusyBox's dpkg-deb archive extraction. CWE-59
- CVE-2026-109274 ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race… CWE-59
- CVE-2026-105081 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for… CWE-59
- CVE-2026-108119 A flaw was found in busybox. CWE-59
- CVE-2026-12345 The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. CWE-59