CVE-2019-11482

Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.

Score

CVSS 3.1 4.7 Medium

Status

Modified - security@ubuntu.com

Published

2020-02-08

Last modified

2024-09-17

Weaknesses

CWE-367

Affected products

• Apport (Apport Project)
• Apport (Canonical)
• Ubuntu Linux (Canonical)

References

• https://usn.ubuntu.com/usn/usn-4171-1
• https://usn.ubuntu.com/usn/usn-4171-2