CVE-2015-1318
Published Apr 17, 2015
Last updated 7 years ago
Overview
- Description
- The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).
- Source
- security@ubuntu.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apport_project:apport:2.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C587160-F938-4C50-A576-9340C25C4C55"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "620CA03F-1870-43C5-A461-74187F190234"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "744360E3-1C77-4903-A233-642C46BDB08B"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.13.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EB2B501-A32A-4A6D-AF0C-6BC371753466"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3D1B30C-509A-4C50-B42E-D5A9CCB9D985"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CBC4B18-529F-4AAE-BCFE-6F8ACA5346B5"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF1E166C-4173-41CC-9011-6154F9879934"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD4C9CE4-9950-4B16-B5E8-77CC271276AB"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18DE4F32-1F3C-47ED-ACE2-399B5BEB3E8B"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D811E6BA-6E1D-4E3A-8658-41DDC436F8D4"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11AEDA35-3CCC-42AD-A7CD-2A02EAA8301E"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.14.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8319DD9F-0B18-43AA-A6E8-368CA9D56CAE"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2CC60CF-F046-4EEA-94AC-B5678CEFCD12"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.15.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3838106-FD5A-41D4-AC89-AFBE0BA8E9A6"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C450F1A1-D6E0-4D50-806F-C84168E94CB5"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.16.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "838FF491-4F6B-4E51-888E-5C62D647EC43"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.16.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2098B517-F8A7-4675-B57F-57A8B790DFA7"
},
{
"criteria": "cpe:2.3:a:apport_project:apport:2.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F9F8E6F-D879-4ADE-BBF1-A92C36DD9FCA"
}
],
"operator": "OR"
}
]
}
]