CVE-2015-5287
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
- Record
CVE-2015-5287- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List
7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
- Record
CVE-2015-5287- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59
- Updated
- 2026-11-02
EUVDEUVD-2015-5264
7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
- Record
EUVD-2015-5264- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hf8c-7p7w-mch5
7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
- Record
GHSA-hf8c-7p7w-mch5- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59
- Updated
- 2026-11-02
CISA KEV No score
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
- Record
CVE-2015-5287- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
abrtRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-ccppRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pstoreoopsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pythonRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-vmcoreRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-xorgRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-cliRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-console-notificationRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-dbusRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
Show 170 moreShow less
| Package | Affected | Fixed |
|---|---|---|
abrt-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-desktopRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-guiRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-libsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-libsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-pythonRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-tuiRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreportRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-anacondaRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-cliRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-filesystemRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtkRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-mailxRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-ureportRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-pythonRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhelRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-anaconda-bugzillaRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-webRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
abrt-addon-upload-watchRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-python-docRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-retrace-clientRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreport-compatRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtk-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-newtRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-loggerRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-bugzillaRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-web-develRed Hat:enterprise_linux:7::client From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
abrtRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-ccppRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pstoreoopsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pythonRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-vmcoreRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-xorgRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-cliRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-console-notificationRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-dbusRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-pythonRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-tuiRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreportRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-anacondaRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-cliRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-filesystemRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtkRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-mailxRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-ureportRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-pythonRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhelRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-anaconda-bugzillaRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-webRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
abrt-addon-upload-watchRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-desktopRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-guiRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-python-docRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-retrace-clientRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreport-compatRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtk-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-newtRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-loggerRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-bugzillaRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-web-develRed Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
abrtRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-ccppRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pstoreoopsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pythonRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-vmcoreRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-xorgRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-cliRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-console-notificationRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-dbusRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-desktopRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-guiRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-libsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-libsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-pythonRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-tuiRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreportRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-anacondaRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-cliRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-filesystemRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtkRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-mailxRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-ureportRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-pythonRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhelRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-anaconda-bugzillaRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-webRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
abrt-addon-upload-watchRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-python-docRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-retrace-clientRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreport-compatRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtk-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-newtRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-loggerRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-bugzillaRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-web-develRed Hat:enterprise_linux:7::server From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
abrtRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-ccppRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pstoreoopsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-pythonRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-vmcoreRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-addon-xorgRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-cliRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-console-notificationRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-dbusRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-desktopRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-guiRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-pythonRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-tuiRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreportRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-anacondaRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-cliRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-filesystemRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtkRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-mailxRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-ureportRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-pythonRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhelRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-anaconda-bugzillaRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-webRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
abrt-addon-upload-watchRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-gui-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-python-docRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
abrt-retrace-clientRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-35.el7 | 0:2.1.11-35.el7 |
libreport-compatRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-gtk-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-newtRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-plugin-loggerRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-rhel-bugzillaRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
libreport-web-develRed Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs |
before 0:2.1.11-31.el7 | 0:2.1.11-31.el7 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | ABRT sosreport Privilege Escalation | 2015-11-23 |
| Exploit-DB | RHEL 7.0/7.1 - 'abrt/sosreport' Local Privilege Escalation | 2015-12-01 |
| Exploit-DB | abrt (Centos 7.1 / Fedora 22) - Local Privilege Escalation | 2015-12-01 |
| Exploit-DB | ABRT - sosreport Privilege Escalation (Metasploit) | 2019-09-25 |
| PoC in GitHub | HORKimhab/CVE-2015-5287 | 2026-08-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5287 is a high vulnerability (CVSS 7.8) in Red Hat Automatic Bug Reporting Tool, published December 7, 2015. CISA lists it as known to be exploited, since August 26, 2026. EUVD reports exploitation since August 26, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.00%, the 92nd percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2015-2505.html
exploit-db.com/exploits/38832
openwall.com/lists/oss-security/2015/12/01/1
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
bugzilla.redhat.com/show_bug.cgi?id=1266837
securityfocus.com/bid/78137
Show 20 moreShow less
github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e
packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html
blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5287
nvd.nist.gov/vuln/detail/CVE-2015-5287
github.com/advisories/GHSA-hf8c-7p7w-mch5
access.redhat.com/errata/RHSA-2015:2505
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1262252
bugzilla.redhat.com/show_bug.cgi?id=1270903
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2505.json
access.redhat.com/security/cve/CVE-2015-5273
cve.org/CVERecord?id=CVE-2015-5273
nvd.nist.gov/vuln/detail/CVE-2015-5273
access.redhat.com/security/cve/CVE-2015-5287
cve.org/CVERecord?id=CVE-2015-5287
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2015-5302
cve.org/CVERecord?id=CVE-2015-5302
nvd.nist.gov/vuln/detail/CVE-2015-5302