CVE-2015-3315

ABRT is a helper that automatically collects information when the system or a program crashes. This bug is like a mailroom that follows a shortcut note left by someone else: a local user can trick ABRT into looking at a different file than it was supposed to, which can expose data or change who owns files. In practice, the danger is mainly for systems where someone has local access and ABRT runs with higher privileges.

This matters if your company runs the automatic bug reporting tool (ABRT) and also has any local accounts with basic permissions on those machines. The attack requires local access, and it depends on whether the ABRT behavior reaches the vulnerable temporary paths; in the default configuration, it is not reachable by default. If an attacker can create symlinks in the shared temporary locations ABRT processes and ABRT runs those files with elevated privileges, then you should treat this as a real risk.

This is AMBER: a public exploit exists, and the flaw can directly cause sensitive file read and ownership changes when a local user can reach the vulnerable temporary-path handling. It’s not a remote internet problem, but you should act because local access plus ABRT’s privileged processing is enough to cause damage.