CVE-2015-1318

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

Score

CVSS 2.0 7.2 High

Status

Modified - security@ubuntu.com

Published

2015-04-17

Last modified

2025-11-03

Weaknesses

CWE-264

Affected products

• Apport (Apport Project)

References

• http://www.osvdb.org/120803
• http://www.ubuntu.com/usn/USN-2569-1
• https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758
• https://launchpad.net/apport/trunk/2.17.1
• https://www.exploit-db.com/exploits/36782/
• https://www.exploit-db.com/exploits/43971/
• http://seclists.org/fulldisclosure/2025/Jun/9