CVEvulnerability
CVE-2015-1318
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-04-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).
Affected configurations
• apport project apport 2.13
• apport project apport 2.13.1
• apport project apport 2.13.2
• apport project apport 2.13.3
• apport project apport 2.14
• apport project apport 2.14.1
• apport project apport 2.14.2
• apport project apport 2.14.3
• apport project apport 2.14.4
• apport project apport 2.14.5
• apport project apport 2.14.6
• apport project apport 2.14.7
• apport project apport 2.15
• apport project apport 2.15.1
• apport project apport 2.16
• apport project apport 2.16.1
• apport project apport 2.16.2
• apport project apport 2.17
Related
Weakness · not in database (1)
References
- http://www.osvdb.org/120803 www.osvdb.org
- http://www.ubuntu.com/usn/USN-2569-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758 bugs.launchpad.net
- https://launchpad.net/apport/trunk/2.17.1 Patch
- https://www.exploit-db.com/exploits/36782/ Exploit
- https://www.exploit-db.com/exploits/43971/ www.exploit-db.com
- http://seclists.org/fulldisclosure/2025/Jun/9 seclists.org
- http://www.osvdb.org/120803 www.osvdb.org
- http://www.ubuntu.com/usn/USN-2569-1 www.ubuntu.com
- https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758 bugs.launchpad.net
- https://launchpad.net/apport/trunk/2.17.1 Patch
- https://www.exploit-db.com/exploits/36782/ Exploit
- https://www.exploit-db.com/exploits/43971/ www.exploit-db.com