Skip to content
Sign in
Not rated

CVE-2017-14177 Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain…

Description

Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324.

Affected products and versions

Product Affected versions Fixed in
Apport Versions not published

Other CVEs of Apport

The 3 CVEs of Apport →
CVE-2018-6552 Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as… Not rated CVE-2017-14179 Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create… Not rated
Track this CVE