[USN-2744-1] Apport vulnerability

========================================================================== Ubuntu Security Notice USN-2744-1 September 24, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Apport Denial of Service Vulnerability

Apport is a toolkit for Ubuntu that collects and gives feedback on error messages information that the operating system finds useful when an application crashes. A denial-of-service vulnerability exists in versions prior to Apport 2.19, which allows local users to cause a denial of service or...

CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

Hardcoded credentials

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

CVE-2015-1338

CVE-2015-1338 affects the Apport crash-dump handling in Linux environments (kernel_crashdump) prior to version 2.19. A local attacker could exploit insecure crash dump file handling to cause a denial of service via disk consumption or potentially elevate privileges through symlink or hard link at...

Ubuntu Apport - Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits Source: http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/ Problem description: On Ubuntu Vivid Linux distribution apport is used for automated sending of client program crash dumps but also of kernel crash...

Apport 2.19 (Ubuntu 15.04) - Local Privilege Escalation

Apport 2.19 Ubuntu 15.04 - Local Privilege Escalation Source: http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/ Problem description: On Ubuntu Vivid Linux distribution apport is used for automated sending of client program crash dumps but also of kernel crash...

Apport 2.19 (Ubuntu 15.04) - Local Privilege Escalation

Source: http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/ Problem description: On Ubuntu Vivid Linux distribution apport is used for automated sending of client program crash dumps but also of kernel crash dumps. For kernel crashes, upstart or SysV init invokes...

Ubuntu 14.04 LTS : Apport vulnerability (USN-2744-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2744-1 advisory. Halfdog discovered that Apport incorrectly handled kernel crash dump files. A local attacker could use this issue to cause a denial of service, or possibly elevat...

Ubuntu: Security Advisory (USN-2744-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2744-1 apport vulnerability

Halfdog discovered that Apport incorrectly handled kernel crash dump files. A local attacker could use this issue to cause a denial of service, or possibly elevate privileges. The default symlink protections for affected releases should reduce the vulnerability to a denial of service...

USN-2744-1: Apport vulnerability

Halfdog discovered that Apport incorrectly handled kernel crash dump files. A local attacker could use this issue to cause a denial of service, or possibly elevate privileges. The default symlink protections for affected releases should reduce the vulnerability to a denial of service...

UBUNTU-CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

CVE-2015-1338

kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...

Ubuntu: Security Advisory (USN-2609-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apport Local Elevation of Privilege Vulnerability (CNVD-2015-03433)

Apport is a toolkit for collecting and providing feedback on error messages. A local boost vulnerability exists in Apport, which allows a local attacker to gain root privileges...

Apport Local Elevation of Privilege Vulnerability

Apport is a toolkit for collecting and providing feedback on error messages. Apport has a security vulnerability that allows a local attacker to exploit the vulnerability to elevate privileges...

Apport (Ubuntu 14.0414.1015.04) - Race Condition Privilege Escalation

Apport Ubuntu 14.0414.1015.04 - Race Condition Privilege Escalation / Exploit Title: apport/ubuntu local root race condition Date: 2015-05-11 Exploit Author: rebel Version: ubuntu 14.04, 14.10, 15.04 Tested on: ubuntu 14.04, 14.10, 15.04 CVE : CVE-2015-1325 ==============================...

Ubuntu 14.04 LTS : Apport vulnerabilities (USN-2609-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2609-1 advisory. Sander Bos discovered that Apport incorrectly handled permissions when the system was configured to generate core dumps for setuid binaries. A local...