CVE-2015-3142

The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2015-1083.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1210.html
• http://www.openwall.com/lists/oss-security/2015/04/17/5Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/75116Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1212818Issue Tracking, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1083.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1210.html
• http://www.openwall.com/lists/oss-security/2015/04/17/5Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/75116Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1212818Issue Tracking, Vendor Advisory

Published

Jun 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3135Heap-based buffer overflow in Adobe Flash Player before 13.0…
• CVE-2015-3136Use-after-free vulnerability in Adobe Flash Player before 13…
• CVE-2015-3137Use-after-free vulnerability in Adobe Flash Player before 13…
• CVE-2015-3138print-wb.c in tcpdump before 4.7.4 allows remote attackers t…
• CVE-2015-3140Multiple cross-site request forgery (CSRF) vulnerabilities i…8.8
• CVE-2015-3141Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-3143cURL and libcurl 7.10.6 through 7.41.0 does not properly re-…
• CVE-2015-3144The fix_hostname function in cURL and libcurl 7.37.0 through…
• CVE-2015-3145The sanitize_cookie_path function in cURL and libcurl 7.31.0…
• CVE-2015-3146The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet h…
• CVE-2015-3147daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool…6.5
• CVE-2015-3148cURL and libcurl 7.10.6 through 7.41.0 do not properly re-us…