VULNERABILITY INTELLIGENCE

CVE-2015-1862

CVSS score7 HIGH
EPSS probability3.05%
CISA KEVNot currently listed
Published2018-02-09
Last modified2026-08-26
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references