CVE Vulnerabilities

CVE-2015-1341

Published: Apr 22, 2019 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
HIGH
root.io logo minimus.io logo echo.ai logo

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

Affected Software

NameVendorStart VersionEnd Version
Ubuntu_linuxCanonical12.04 (including)12.04 (including)
Ubuntu_linuxCanonical14.04 (including)14.04 (including)
Ubuntu_linuxCanonical15.04 (including)15.04 (including)
Ubuntu_linuxCanonical15.10 (including)15.10 (including)
ApportUbuntudevel*
ApportUbuntuesm-infra-legacy/trusty*
ApportUbuntuesm-infra/xenial*
ApportUbuntuprecise*
ApportUbuntutrusty*
ApportUbuntutrusty/esm*
ApportUbuntuvivid*
ApportUbuntuvivid/stable-phone-overlay*
ApportUbuntuwily*
ApportUbuntuxenial*
ApportUbuntuyakkety*
ApportUbuntuzesty*

References