Summary
Felix Wilhelm discovered a path traversal vulnerability in Apport
when handling the ExecutablePath field in crash files. An attacker
could trick a user into opening a specially crafted crash file and
execute arbitrary code with the user's privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | apport | 2.14.1-0ubuntu3.25 |
| Ubuntu · 16.04 LTS 16.04:LTS | apport | 2.20.1-0ubuntu2.10 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then…
References
-
report
https://ubuntu.com/security/CVE-2017-10708