CVE-2015-3315 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-3315 Interim 1 2 2024-06-12T01:37:56Z current 2023-10-31T01:30:05Z 2024-06-12T01:37:56Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-3315 Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 abrt-2.1.11-22.el7_1 abrt-addon-ccpp-2.1.11-22.el7_1 abrt-addon-kerneloops-2.1.11-22.el7_1 abrt-addon-pstoreoops-2.1.11-22.el7_1 abrt-addon-python-2.1.11-22.el7_1 abrt-addon-upload-watch-2.1.11-22.el7_1 abrt-addon-vmcore-2.1.11-22.el7_1 abrt-addon-xorg-2.1.11-22.el7_1 abrt-cli-2.1.11-22.el7_1 abrt-console-notification-2.1.11-22.el7_1 abrt-dbus-2.1.11-22.el7_1 abrt-desktop-2.1.11-22.el7_1 abrt-devel-2.1.11-22.el7_1 abrt-gui-2.1.11-22.el7_1 abrt-gui-devel-2.1.11-22.el7_1 abrt-gui-libs-2.1.11-22.el7_1 abrt-libs-2.1.11-22.el7_1 abrt-python-2.1.11-22.el7_1 abrt-python-doc-2.1.11-22.el7_1 abrt-retrace-client-2.1.11-22.el7_1 abrt-tui-2.1.11-22.el7_1 libreport-2.1.11-23.el7_1 libreport-anaconda-2.1.11-23.el7_1 libreport-cli-2.1.11-23.el7_1 libreport-compat-2.1.11-23.el7_1 libreport-devel-2.1.11-23.el7_1 libreport-filesystem-2.1.11-23.el7_1 libreport-gtk-2.1.11-23.el7_1 libreport-gtk-devel-2.1.11-23.el7_1 libreport-newt-2.1.11-23.el7_1 libreport-plugin-bugzilla-2.1.11-23.el7_1 libreport-plugin-kerneloops-2.1.11-23.el7_1 libreport-plugin-logger-2.1.11-23.el7_1 libreport-plugin-mailx-2.1.11-23.el7_1 libreport-plugin-reportuploader-2.1.11-23.el7_1 libreport-plugin-ureport-2.1.11-23.el7_1 libreport-python-2.1.11-23.el7_1 libreport-web-2.1.11-23.el7_1 libreport-web-devel-2.1.11-23.el7_1 abrt-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-addon-ccpp-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-addon-kerneloops-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-addon-pstoreoops-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-addon-python-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-addon-upload-watch-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-addon-vmcore-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-addon-xorg-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-cli-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-console-notification-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-dbus-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-desktop-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-devel-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-gui-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-gui-devel-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-gui-libs-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-libs-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-python-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-python-doc-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-retrace-client-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 abrt-tui-2.1.11-22.el7_1 as a component of SUSE Liberty Linux 7 libreport-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-anaconda-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-cli-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-compat-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-devel-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-filesystem-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-gtk-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-gtk-devel-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-newt-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-plugin-bugzilla-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-plugin-kerneloops-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-plugin-logger-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-plugin-mailx-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-plugin-reportuploader-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-plugin-ureport-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-python-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-web-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 libreport-web-devel-2.1.11-23.el7_1 as a component of SUSE Liberty Linux 7 Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm. CVE-2015-3315 SUSE Liberty Linux 7:abrt-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-addon-ccpp-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-addon-kerneloops-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-addon-pstoreoops-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-addon-python-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-addon-upload-watch-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-addon-vmcore-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-addon-xorg-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-cli-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-console-notification-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-dbus-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-desktop-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-devel-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-gui-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-gui-devel-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-gui-libs-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-libs-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-python-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-python-doc-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-retrace-client-2.1.11-22.el7_1 SUSE Liberty Linux 7:abrt-tui-2.1.11-22.el7_1 SUSE Liberty Linux 7:libreport-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-anaconda-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-cli-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-compat-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-devel-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-filesystem-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-gtk-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-gtk-devel-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-newt-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-plugin-bugzilla-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-plugin-kerneloops-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-plugin-logger-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-plugin-mailx-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-plugin-reportuploader-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-plugin-ureport-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-python-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-web-2.1.11-23.el7_1 SUSE Liberty Linux 7:libreport-web-devel-2.1.11-23.el7_1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C