CVE-2015-5273: Red Hat Automatic Bug Reporting Tool

Low severity, CVSS 3.6. EPSS: 0.9% chance of exploitation in the next 30 days.

The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.

Affected products

• Red Hat Automatic Bug Reporting Tool: up to and including 2.7.0
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Hpc Node: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2015-12-07. Last modified 2026-06-17.