CVE-2015-3315

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system.

This issue affects the versions of the abrt package as shipped with Red Hat Enterprise Linux 6 and 7.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

It is recommended to disable abrt via the following command line, till the flaws have been resolved: sysctl -w kern.core_pattern=core

Note: This will reset, if abrt is re-started.