Arbitrary Code Execution

2022-05-1818:29:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

15.8%

JSON

apport is vulnerable to race condition. The vulnerability exists in the ‘replaced executable’ detection that with the correct local configuration which allows an attacker to execute arbitrary code as root.

CPENameOperatorVersion
apport:focaleq2.20.11-0ubuntu27.9
apport:focaleq2.20.11-0ubuntu27
apport:focaleq2.20.11-0ubuntu27.6
apport:focaleq2.20.11-0ubuntu27.8
apport:focaleq2.20.11-0ubuntu27.12
apport:focaleq2.20.11-0ubuntu27.13
apport:bioniceq2.20.9-0ubuntu7.16
apport:bioniceq2.20.9-0ubuntu7.26
apport:bioniceq2.20.9-0ubuntu7.20
apport:bioniceq2.20.9-0ubuntu7

Name	Operator	Version
apport:focal	eq	2.20.11-0ubuntu27.9
apport:focal	eq	2.20.11-0ubuntu27
apport:focal	eq	2.20.11-0ubuntu27.6
apport:focal	eq	2.20.11-0ubuntu27.8
apport:focal	eq	2.20.11-0ubuntu27.12
apport:focal	eq	2.20.11-0ubuntu27.13
apport:bionic	eq	2.20.9-0ubuntu7.16
apport:bionic	eq	2.20.9-0ubuntu7.26
apport:bionic	eq	2.20.9-0ubuntu7.20
apport:bionic	eq	2.20.9-0ubuntu7

Rows per page:

1-10 of 111

0.0004 Low

EPSS

Percentile

15.8%

JSON

Related for VERACODE:35594