Skip to content
OpenAdvisories
Unscored USN-3664-2 1 CVE

apport vulnerability

Published Jun 4, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu
14.04 LTS was also vulnerable to this issue, but was incorrectly omitted
from the previous updates. This update provides the corresponding update
for Ubuntu 14.04 LTS.

Original advisory details:

Sander Bos discovered that Apport incorrectly handled core dumps when
certain files are missing from /proc. A local attacker could possibly use
this issue to cause a denial of service, gain root privileges, or escape
from containers.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS apport 2.14.1-0ubuntu3.29

Vulnerabilities 1

  • Unscored —
    CVE-2018-6552

    Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

    Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape fro…

    apport Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-6552