Skip to content
Back to search

CVE-2015-5287

HIGH
7.8 CISA KEVNVD

Summary

generated automatically from NVD data

CVE-2015-5287 affects the abrt-hook-ccpp helper program in the Automatic Bug Reporting Tool (ABRT) before 2.7.1, which is also relevant to Red Hat Enterprise Linux and Oracle Linux. The program is vulnerable to a symlink attack (CWE-59) on a file with a predictable name, such as abrt-hax-coredump under /var/tmp/abrt or /var/spool/abrt, letting local users with certain permissions gain privileges. It is rated 7.8 (HIGH, CVSS v3.1) and is listed in the CISA KEV catalog as actively exploited.

NVD description

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

Share:

⚠️ Actively exploited — CISA KEV

This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2026-08-26. It is confirmed exploited in the wild and must be patched as a priority.

Remediation deadline (US federal agencies): 2026-09-09

EPSS · FIRST.org

5.0%probability of exploitation in the next 30 days

Higher than 92% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.

CVSS v3.1 Score

7.8
/ 10.0
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Information

Published
7 déc. 2015
Updated
27 août 2026
Status
Analyzed
Source
secalert@redhat.com

Affected products

redhat automatic bug reporting tool
Versions : 2.7.0
oracle linuxAll Linux Kernel CVEs →
Versions : 7
redhat enterprise linux
Versions : 6.0, 7.0
redhat enterprise linux desktop
Versions : 7.0
redhat enterprise linux hpc node
Versions : 7.0
redhat enterprise linux server
Versions : 7.0
redhat enterprise linux workstation
Versions : 7.0

Weaknesses (CWE)

CWE-59CWE-59

References (18)

Similar CVEs

Other vulnerabilities of type CWE-59

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring