← back
CVE-2015-3315

CVE-2015-3315

EPSS 4.8%
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/44097unverifiedcve_referencewww.exploit-db.com/exploits/44097/unverifiedexploitdbwww.exploit-db.com/exploits/36747unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://rhn.redhat.com/errata/RHSA-2015-1083.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1210.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1211835https://github.com/abrt/abrt/commit/17cb66b13997b0159b4253b3f5722db79f476d68https://github.com/abrt/abrt/commit/4f2c1ddd3e3b81d2d5146b883115371f1cada9f9https://github.com/abrt/abrt/commit/80408e9e24a1c10f85fd969e1853e0f192157f92https://github.com/abrt/abrt/commit/d6e2f6f128cef4c21cb80941ae674c9842681aa7https://www.exploit-db.com/exploits/44097/http://www.openwall.com/lists/oss-security/2015/04/14/4http://www.openwall.com/lists/oss-security/2015/04/16/12http://www.securityfocus.com/bid/75117