Summary
Halfdog discovered that Apport incorrectly handled kernel crash dump files.
A local attacker could use this issue to cause a denial of service, or
possibly elevate privileges. The default symlink protections for affected
releases should reduce the vulnerability to a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | apport | 2.14.1-0ubuntu3.15 |
Vulnerabilities 1
-
Unscored —CVE-2015-1338 Public exploit
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly g…
References
-
report
https://ubuntu.com/security/CVE-2015-1338