CVE-2018-6552

🗓️ 31 May 2018 22:00:00Reported by canonicalType

Apport mishandles crashes allowing local users to create files as root, leading to DoS, privilege escalation, or container escape

Reporter	Title	Published	Views	Family All 14
Cvelist	CVE-2018-6552 Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing	31 May 201822:00	–	cvelist
EUVD	EUVD-2018-18304	7 Oct 202500:30	–	euvd
NVD	CVE-2018-6552	31 May 201822:29	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-3664-1)	5 Jun 201800:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-3664-2)	5 Jun 201800:00	–	openvas
OSV	UBUNTU-CVE-2018-6552	30 May 201818:00	–	osv
OSV	USN-3664-1 apport vulnerability	30 May 201817:13	–	osv
OSV	USN-3664-2 apport vulnerability	4 Jun 201816:39	–	osv
Prion	Code injection	31 May 201822:29	–	prion
UbuntuCve	CVE-2018-6552	30 May 201818:00	–	ubuntucve

NVD

Node

apport_project apportMatch2.14.1

AND

canonical ubuntu_linuxMatch14.04lts

Node

apport_project apportMatch2.20.9

AND

canonical ubuntu_linuxMatch18.04lts

Node

apport_project apportMatch2.20.7

AND

canonical ubuntu_linuxMatch17.10

Node

apport_project apportMatch2.20.1

AND

canonical ubuntu_linuxMatch16.04lts

[
  {
    "platforms": [
      "Ubuntu 18.04"
    ],
    "product": "Apport",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.20.8-0ubuntu4",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.9-0ubuntu7.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Ubuntu 16.04"
    ],
    "product": "Apport",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.20.1-0ubuntu2.15",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.1-0ubuntu2.18",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Ubuntu 17.10"
    ],
    "product": "Apport",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.20.7-0ubuntu3.7",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.7-0ubuntu3.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Ubuntu 14.04"
    ],
    "product": "Apport",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.14.1-0ubuntu3.28"
      }
    ]
  }
]

Source	Link
usn	www.usn.ubuntu.com/3664-2/
usn	www.usn.ubuntu.com/usn/usn-3664-1

21 Nov 2024 04:10Current

7.5High risk

Vulners AI Score7.5

CVSS 27.2

CVSS 37.8

EPSS0.00032