Lucene search

UbuntuUSN-2782-1

HistoryOct 27, 2015 - 12:00 a.m.

Apport vulnerability

2015-10-2700:00:00

ubuntu.com

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

12.6%

JSON

Releases

Ubuntu 15.10
Ubuntu 15.04
Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

apport - automatically generate crash reports for debugging

Details

Gabriel Campana discovered that Apport incorrectly handled Python module
imports. A local attacker could use this issue to elevate privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu15.10noarchapport< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchapport-gtk< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchapport-kde< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchapport-noui< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchapport-retrace< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchapport-valgrind< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchdh-apport< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchpython-apport< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchpython-problem-report< 2.19.1-0ubuntu4UNKNOWN
Ubuntu15.10noarchpython3-apport< 2.19.1-0ubuntu4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	15.10	noarch	apport	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	apport-gtk	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	apport-kde	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	apport-noui	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	apport-retrace	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	apport-valgrind	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	dh-apport	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	python-apport	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	python-problem-report	< 2.19.1-0ubuntu4	UNKNOWN
Ubuntu	15.10	noarch	python3-apport	< 2.19.1-0ubuntu4	UNKNOWN

Rows per page:

1-10 of 401

References

ubuntu.com/security/CVE-2015-1341

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for USN-2782-1