The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
History

Wed, 26 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Oracle
Oracle linux
CPEs cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle linux

Wed, 26 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 26 Aug 2026 17:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2026-08-26T00:00:00+00:00', 'dueDate': '2026-09-09T00:00:00+00:00'}


cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2015-12-07T18:00:00.000Z

Updated: 2026-08-27T03:56:39.465Z

Reserved: 2015-07-01T00:00:00.000Z

Link: CVE-2015-5287

cve-icon Vulnrichment

Updated: 2024-08-06T06:41:09.524Z

cve-icon NVD

Status : Analyzed

Published: 2015-12-07T18:59:02.230

Modified: 2026-08-27T04:16:38.280

Link: CVE-2015-5287

cve-icon Redhat

Severity : Moderate

Publid Date: 2015-11-23T00:00:00Z

Links: CVE-2015-5287 - Bugzilla