Skip to content
OpenAdvisories
Unscored USN-2609-1 2 CVEs

apport vulnerabilities

Published May 21, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Sander Bos discovered that Apport incorrectly handled permissions when
the system was configured to generate core dumps for setuid binaries. A
local attacker could use this issue to gain elevated privileges.
(CVE-2015-1324)

Philip Pettersson discovered that Apport contained race conditions
resulting core dumps to be generated with incorrect permissions in
arbitrary locations. A local attacker could use this issue to gain elevated
privileges. (CVE-2015-1325)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS apport 2.14.1-0ubuntu3.11

Vulnerabilities 2

  • Unscored —
    CVE-2015-1324

    Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, befor…

    apport Ubuntu
  • Unscored —
    CVE-2015-1325 Public exploit

    Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in U…

    apport Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-1324
  • report
    https://ubuntu.com/security/CVE-2015-1325