Command injection

An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in RespawnCommand or ProcCmdline fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the...

CVE-2016-9951

An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in "RespawnCommand" or "ProcCmdline" fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show...

CVE-2016-9951: Improper Access Control

An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in RespawnCommand or ProcCmdline fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the...

Ubuntu 14.04 LTS / 16.04 LTS : Apport vulnerabilities (USN-3157-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3157-1 advisory. Donncha O Cearbhaill discovered that the crash file parser in Apport improperly treated the CrashDB field as python code. An attacker could u...

PT-2016-7887

Name of the Vulnerable Software and Affected Versions Apport versions prior to 2.20.4 Description An issue was discovered where a malicious Apport crash file can contain a restart command in RespawnCommand or ProcCmdline fields, which will be executed if a user clicks the Relaunch button on the...