Skip to content
OpenAdvisories
High USN-2782-1 1 CVE

apport vulnerability

Published Oct 27, 2015 · Updated Feb 10, 2026

Summary

Gabriel Campana discovered that Apport incorrectly handled Python module
imports. A local attacker could use this issue to elevate privileges.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS apport 2.14.1-0ubuntu3.18

Vulnerabilities 1

  • High 7.4

    Apport privilege escalation through Python module imports

    Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

References

  • report
    https://ubuntu.com/security/CVE-2015-1341