CVE Vulnerabilities

CVE-2015-1324

Published: Aug 25, 2017 | Modified: Aug 30, 2017
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
HIGH

Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges by leveraging incorrect handling of permissions when generating core dumps for setuid binaries.

Affected Software

Name Vendor Start Version End Version
Ubuntu_linux Canonical 12.04 (including) 12.04 (including)
Ubuntu_linux Canonical 14.04 (including) 14.04 (including)
Ubuntu_linux Canonical 14.10 (including) 14.10 (including)
Ubuntu_linux Canonical 15.04 (including) 15.04 (including)
Apport Ubuntu devel *
Apport Ubuntu precise *
Apport Ubuntu trusty *
Apport Ubuntu utopic *
Apport Ubuntu vivid *
Apport Ubuntu vivid/stable-phone-overlay *
Apport Ubuntu wily *
Apport Ubuntu xenial *
Apport Ubuntu yakkety *
Apport Ubuntu zesty *

References