7.7
Élevée
CVE-2023-1326 A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604
Description
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apport 2.26 | premières → 2.26.0 | Pas de correctif indiqué |
Autres CVE de Apport
Les 11 CVE de Apport →
CVE-2020-11936
gdbus setgid privilege escalation
3.1
Faible
CVE-2022-28653
Users can consume unlimited disk space in /var/crash
7.5
Élevée
CVE-2022-28658
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
5.5
Moyenne
CVE-2022-28657
Apport does not disable python crash handler before entering chroot
7.8
Élevée