CVE-2015-3315

7.8 highEPSS 4.8%

High (7.8) in redhat automatic bug reporting tool. EPSS 4.8% chance of exploitation in the next 30 days.

Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.8% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2017-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:automatic_bug_reporting_tool

References

http://rhn.redhat.com/errata/RHSA-2015-1083.html
http://rhn.redhat.com/errata/RHSA-2015-1210.html
http://www.openwall.com/lists/oss-security/2015/04/14/4
http://www.openwall.com/lists/oss-security/2015/04/16/12
http://www.securityfocus.com/bid/75117

Check your stack JSON