ABRT CVE-2015-5287: 2015 RHEL 7 Local Root Bug Now in KEV
This is a ten-year-old local root bug that any RHEL 7 or CentOS 7 host updated since late 2015 already has fixed; the KEV listing matters only for forgotten, never-patched machines, and those have bigger problems.
Must act: Anyone still running RHEL 7, CentOS 7 or similar hosts with abrt older than 2.1.11-35.el7, especially shared or multi-user systems and old appliances built on CentOS 7.
Can relax: RHEL 6 (not affected per Red Hat), systems that do not have ABRT installed, and any RHEL 7 or CentOS 7 host that has taken routine updates since November 2015.
- Inventory remaining RHEL 7, CentOS 7 and derived hosts and appliances.
- Check the installed version with rpm -q abrt libreport and update with yum update abrt libreport if older than the RHSA-2015:2505 builds.
- Where ABRT is not needed, disable its crash hook: systemctl disable --now abrt-ccpp.