Veille CVE

Mercredi 26 août 2026

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes « Red Hat Enterprise Linux 7 » ✕
  1. CVE-2015-5287 7.8 Élevée Exploitée

    Redhat automatic bug reporting tool · Oracle linux · Redhat enterprise linux · Redhat enterprise linux desktop

    The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

  2. CVE-2015-3246 7.4 Élevée Exploitée

    Redhat enterprise linux · Opensuse opensuse · Libuser project libuser

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.