VulnSocial

CVE-2015-5273Disclosure(redhat / automatic_bug_reporting_tool)

LOWCVSS 3.6 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.

redhat CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • automatic_bug_reporting_tool
  • enterprise_linux_desktop
  • enterprise_linux_hpc_node
  • enterprise_linux_server

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
redhat
Products
automatic_bug_reporting_toolenterprise_linux_desktopenterprise_linux_hpc_nodeenterprise_linux_serverenterprise_linux_workstation

1 version affected across 5 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-27: 1Technical Details · 2026-08-27: 108-27
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • DailyCVE@dailycve
    Disclosure

    🟠 ABRT (Automatic Bug Reporting Tool), Local Privilege Escalation via Symlink Attack, #CVE-2015-5273 (Medium) -DC-Aug2026-1952 https://dailycve.com/abrt-automatic-bug-reporting-tool-local-privilege-escalation-via-symlink-attack-cve-2015-5273-medium-dc-aug2026-1952/

    Post summary

    The excerpt introduces CVE‑2015‑5273, describing a local privilege escalation vulnerability, but offers no PoC, exploit details, active usage claim, or patch information.

    0000035
    231 followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
Appredhatautomatic_bug_reporting_tool---
OSredhatenterprise_linux_desktop7.0--
OSredhatenterprise_linux_hpc_node7.0--
OSredhatenterprise_linux_server7.0--
OSredhatenterprise_linux_workstation7.0--

Explore more

Back to dashboardredhat CVEsautomatic_bug_reporting_tool vulnerabilities