What’s Vulnerable › Vulnerabilities

CVE-2015-3150

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-14 · updated 2026-06-17
• Weakness: CWE-20

Description

abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method.

Affected products

• RedHat Automatic Bug Reporting Tool: all versions

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1214457
• https://github.com/abrt/abrt/commit/6e811d78e2719988ae291181f5b133af32ce62d8
• https://github.com/abrt/abrt/commit/7814554e0827ece778ca88fd90832bd4d05520b1
• https://github.com/abrt/abrt/commit/b7f8bd20b7fb5b72f003ae3fa647c1d75f4218b7
• https://github.com/abrt/libreport/commit/1951e7282043dfe1268d492aea056b554baedb75
• https://bugzilla.redhat.com/show_bug.cgi?id=1214457
• https://github.com/abrt/abrt/commit/6e811d78e2719988ae291181f5b133af32ce62d8
• https://github.com/abrt/abrt/commit/7814554e0827ece778ca88fd90832bd4d05520b1
• https://github.com/abrt/abrt/commit/b7f8bd20b7fb5b72f003ae3fa647c1d75f4218b7
• https://github.com/abrt/libreport/commit/1951e7282043dfe1268d492aea056b554baedb75

Get alerted when CVE-2015-3150 or the next vulnerability affects your stack