7.7
High
CVE-2023-1326 A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604
Description
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apport 2.26 | earliest → 2.26.0 | No fix stated |
Other CVEs of Apport
The 11 CVEs of Apport →
CVE-2020-11936
gdbus setgid privilege escalation
3.1
Low
CVE-2022-28653
Users can consume unlimited disk space in /var/crash
7.5
High
CVE-2022-28658
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
5.5
Medium
CVE-2022-28657
Apport does not disable python crash handler before entering chroot
7.8
High