Ubuntu: Security Advisory (USN-3664-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3664-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3664-2: Apport vulnerability

USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu 14.04 LTS was also vulnerable to this issue, but was incorrectly omitted from the previous updates. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Sander Bos discovered that...

USN-3664-2 apport vulnerability

USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu 14.04 LTS was also vulnerable to this issue, but was incorrectly omitted from the previous updates. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Sander Bos discovered that...

Code injection

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The issamens function...

CVE-2018-6552

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The issamens function...

CVE-2018-6552

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The issamens function...

CVE-2018-6552 Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The issamens function...

CVE-2018-6552

CVE-2018-6552 affects the Ubuntu Apport component. The vulnerability arises when Apport handles crashes originating from a PID namespace; if /proc// is missing, the code may forward the crash using the container’s pid in the global namespace. This can allow a local attacker to cause a denial of s...

Ubuntu 16.04 LTS / 18.04 LTS : Apport vulnerability (USN-3664-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3664-1 advisory. Sander Bos discovered that Apport incorrectly handled core dumps when certain files are missing from /proc. A local attacker could possibly use this...

UBUNTU-CVE-2018-6552

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The issamens function...

CVE-2018-6552

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The issamens function...

USN-3664-1 apport vulnerability

Sander Bos discovered that Apport incorrectly handled core dumps when certain files are missing from /proc. A local attacker could possibly use this issue to cause a denial of service, gain root privileges, or escape from containers...

USN-3664-1: Apport vulnerability

Sander Bos discovered that Apport incorrectly handled core dumps when certain files are missing from /proc. A local attacker could possibly use this issue to cause a denial of service, gain root privileges, or escape from containers...

The vulnerability of the Apport software for generating and sending error reports on the Ubuntu operating system allows a perpetrator to trigger a service failure, exit from LXC, or gain root privileges.

The vulnerability of the Apport software for generating and sending error reports on the Ubuntu operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures, trigger exits from LXC Linux Containers, or gain root...

The vulnerability of the software for generating and sending error reports on the Ubuntu operating system allows a perpetrator to trigger a service failure or gain root privileges.

The vulnerability of the Apport software for generating and sending error reports on the Ubuntu operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures or gain root privileges by using files that may be create...

The vulnerability of the software for generating and sending error reports on the Ubuntu operating system allows a perpetrator to trigger a service failure or gain root privileges.

The vulnerability of the Apport software for generating and sending error reports on the Ubuntu operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures or gain root privileges using a kernel dump with setuid...

Apport Denial of Service Vulnerability (CNVD-2018-05517)

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, and Apport is a toolkit that collects and provides feedback on errors information that the operating system finds useful when an application crashes. A security vulnerability exists in versio...

Apport Denial of Service Vulnerability (CNVD-2018-05469)

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, and Apport is a toolkit that collects and provides feedback on errors information that the operating system finds useful when an application crashes. A security vulnerability exists in Apport...

Apport Denial of Service Vulnerability (CNVD-2018-05468)

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, and Apport is a toolkit that collects and provides feedback on errors information that the operating system finds useful when an application crashes. A security vulnerability exists in Apport...