Lucene search
K

CVE-2019-7307

🗓️ 29 Aug 2019 14:40:18Reported by canonicalType 
cve
 cve
🔗 web.nvd.nist.gov👁 167 Views

Apport versions before 2.20.11-0ubuntu5: TOCTTOU vulnerability allows local attacker to replace file with symlink, leading to inclusion of arbitrary file contents in crash report

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Cvelist
CVE-2019-7307 Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml
29 Aug 201914:40
cvelist
EUVD
EUVD-2019-16851
7 Oct 202500:30
euvd
NVD
CVE-2019-7307
29 Aug 201915:15
nvd
OpenVAS
Ubuntu: Security Advisory (USN-4051-1)
9 Jul 201900:00
openvas
OpenVAS
Ubuntu: Security Advisory (USN-4051-2)
26 Aug 202200:00
openvas
OSV
CVE-2019-7307
29 Aug 201915:15
osv
OSV
UBUNTU-CVE-2019-7307
9 Jul 201900:00
osv
OSV
USN-4051-1 apport vulnerability
9 Jul 201900:36
osv
OSV
USN-4051-2 apport vulnerability
9 Jul 201914:41
osv
Prion
Code injection
29 Aug 201915:15
prion
Rows per page
NVD
Node
Node
Node
Node
Node
[
  {
    "vendor": "Ubuntu",
    "product": "apport",
    "versions": [
      {
        "version": "before 2.14.1-0ubuntu3.29+esm1",
        "status": "affected"
      },
      {
        "version": "before 2.20.1-0ubuntu2.19",
        "status": "affected"
      },
      {
        "version": "before 2.20.9-0ubuntu7.7",
        "status": "affected"
      },
      {
        "version": "before 2.20.10-0ubuntu27.1",
        "status": "affected"
      },
      {
        "version": "before 2.20.11-0ubuntu5",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:47Current
6.3Medium risk
Vulners AI Score6.3
CVSS 24.4
CVSS 3.17
CVSS 36.5
EPSS0.00096
167