CVEvulnerability
CVE-2015-1324
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges by leveraging incorrect handling of permissions when generating core dumps for setuid binaries.
Affected configurations
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 14.10
• canonical ubuntu linux 15.04
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/74767 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2609-1 Patch, Vendor Advisory
- https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239 Issue Tracking, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/74767 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2609-1 Patch, Vendor Advisory
- https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239 Issue Tracking, Patch, Vendor Advisory