CVE-2015-1325

2015-05-2100:00:00

ubuntu.com

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

15.9%

JSON

Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu
15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before
2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before
2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to
write to arbitrary files and gain root privileges.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1453900>

Notes

Author	Note
mdeslaur	2609-1

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchapport< 2.0.1-0ubuntu17.9UNKNOWN
ubuntu14.04noarchapport< 2.14.1-0ubuntu3.11UNKNOWN
ubuntu14.10noarchapport< 2.14.7-0ubuntu8.5UNKNOWN
ubuntu15.04noarchapport< 2.17.2-0ubuntu1.1UNKNOWN
ubuntu15.10noarchapport< 2.17.3-0ubuntu1UNKNOWN
ubuntu16.04noarchapport< 2.17.3-0ubuntu1UNKNOWN
ubuntu16.10noarchapport< 2.17.3-0ubuntu1UNKNOWN
ubuntu17.04noarchapport< 2.17.3-0ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	apport	< 2.0.1-0ubuntu17.9	UNKNOWN
ubuntu	14.04	noarch	apport	< 2.14.1-0ubuntu3.11	UNKNOWN
ubuntu	14.10	noarch	apport	< 2.14.7-0ubuntu8.5	UNKNOWN
ubuntu	15.04	noarch	apport	< 2.17.2-0ubuntu1.1	UNKNOWN
ubuntu	15.10	noarch	apport	< 2.17.3-0ubuntu1	UNKNOWN
ubuntu	16.04	noarch	apport	< 2.17.3-0ubuntu1	UNKNOWN
ubuntu	16.10	noarch	apport	< 2.17.3-0ubuntu1	UNKNOWN
ubuntu	17.04	noarch	apport	< 2.17.3-0ubuntu1	UNKNOWN