Skip to content
7.4 High

CVE-2015-1341 Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and…

Description

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

Affected products and versions

Product Affected versions Fixed in
Apport 2.19 earliest → < 2.19.2 2.19.1-0ubuntu4
Apport 2.17 earliest → < 2.17.2-0ubuntu1.7 2.17.2-0ubuntu1.7
Apport 2.14 earliest → < 2.14.1-0ubuntu3.18 2.14.1-0ubuntu3.18
Apport 2.0 earliest → < 2.0.1-0ubuntu17.13 2.0.1-0ubuntu17.13

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of Apport →
Track this CVE