Link following in ABRT
Priority LOW 31CWE-59Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.
Why it matters now
EPSS 0.01066 64th percentileScored 2026-11-07
Fix Fixed ABRT (ABRT): 2.6.0Red Hat: 2 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ABRT | ABRT | before 2.6.0 | 2.6.0 | Patch available | CNA |
- ABRT VendorABRT Affected before 2.6.0 Fixed in 2.6.0 Patch available CNA
CPE configurations NVD · 18
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:automatic_bug_reporting_tool:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:automatic_bug_reporting_tool:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
Show 8 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* | 7.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
Remediation
- Fix · CNA ABRT (ABRT) Fixed in 2.6.0
Red Hat 2 advisories
- RHSA-2015:1210 Released 2015-07-07 · Red Hat rating Moderateabrt security update
- Red Hat Enterprise Linux Desktop (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +17
- Red Hat Enterprise Linux Desktop Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-devel-2.0.8-26.el6_6.1 +5
- Red Hat Enterprise Linux HPC Node (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +13
- Red Hat Enterprise Linux HPC Node Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-desktop-2.0.8-26.el6_6.1 +9
- Red Hat Enterprise Linux Server (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +20
- Red Hat Enterprise Linux Server Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-devel-2.0.8-26.el6_6.1 +8
- Red Hat Enterprise Linux Workstation (v. 6) abrt-2.0.8-26.el6_6.1, abrt-addon-ccpp-2.0.8-26.el6_6.1, abrt-addon-kerneloops-2.0.8-26.el6_6.1 +17
- Red Hat Enterprise Linux Workstation Optional (v. 6) abrt-addon-vmcore-2.0.8-26.el6_6.1, abrt-console-notification-2.0.8-26.el6_6.1, abrt-devel-2.0.8-26.el6_6.1 +5
- RHSA-2015:1083 Released 2015-06-09 · Red Hat rating Importantabrt security update
- Red Hat Enterprise Linux Client (v. 7) abrt-2.1.11-22.el7_1, abrt-addon-ccpp-2.1.11-22.el7_1, abrt-addon-kerneloops-2.1.11-22.el7_1 +27
- Red Hat Enterprise Linux Client Optional (v. 7) abrt-addon-upload-watch-2.1.11-22.el7_1, abrt-devel-2.1.11-22.el7_1, abrt-gui-devel-2.1.11-22.el7_1 +10
- Red Hat Enterprise Linux ComputeNode (v. 7) abrt-2.1.11-22.el7_1, abrt-addon-ccpp-2.1.11-22.el7_1, abrt-addon-kerneloops-2.1.11-22.el7_1 +23
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) abrt-addon-upload-watch-2.1.11-22.el7_1, abrt-dbus-2.1.11-22.el7_1, abrt-desktop-2.1.11-22.el7_1 +14
- Red Hat Enterprise Linux Server (v. 7) abrt-2.1.11-22.ael7b_1, abrt-2.1.11-22.el7_1, abrt-addon-ccpp-2.1.11-22.ael7b_1 +47
- Red Hat Enterprise Linux Server Optional (v. 7) abrt-addon-upload-watch-2.1.11-22.ael7b_1, abrt-addon-upload-watch-2.1.11-22.el7_1, abrt-devel-2.1.11-22.ael7b_1 +28
- Red Hat Enterprise Linux Workstation (v. 7) abrt-2.1.11-22.el7_1, abrt-addon-ccpp-2.1.11-22.el7_1, abrt-addon-kerneloops-2.1.11-22.el7_1 +27
- Red Hat Enterprise Linux Workstation Optional (v. 7) abrt-addon-upload-watch-2.1.11-22.el7_1, abrt-devel-2.1.11-22.el7_1, abrt-gui-devel-2.1.11-22.el7_1 +10
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2015:1083 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2015:1083 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2015:1083 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2015:1083 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2015:1083 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2015:1083 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2015:1083 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2015:1210 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2015:1083 |
Timeline
- 2026-10-02 Threatist record created from CVE-2015-3147
- 2026-10-03 Alias added: GHSA-hw2r-7jp6-9r7m
References
More Red Hat Automatic Bug Reporting Tool vulnerabilities
- TI-2015-04443 The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1… KEVCVSS 3.1HIGH 7.8
- TI-2015-02930 Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of… CVSS 3.0HIGH 7.8
- TI-2015-01672 The crash reporting feature in Abrt allows local users to gain privileges by leveraging… CVSS 3.0HIGH 7.0
- TI-2011-03606 ABRT might allow attackers to obtain sensitive information from crash reports. CVSS 3.1HIGH 7.5
- TI-2026-39133 Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites CVSS 3.1HIGH 7.8
- TI-2015-02784 Path traversal in ABRT CVSS 3.1HIGH 7.8
Sources
- CVE-2015-3147 · CVE Program
- CVE-2015-3147 · NVD
- FIRST EPSS
- GHSA-hw2r-7jp6-9r7m · GitHub Advisory Database · CC BY 4.0
- CVE-2015-3147 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences