CVE-2017-14180

Description

Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability than CVE-2017-14179.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.045

Associated Vulnerability

Vulnerability	OS Platform
automatically generate crash reports for debugging (USN-3480-1) apport_2.20.4-0ubuntu4.7_all.deb	Linux
automatically generate crash reports for debugging (USN-3480-1) apport_2.20.7-0ubuntu3.4_all.deb	Linux
automatically generate crash reports for debugging (USN-3480-1) apport_2.20.1-0ubuntu2.12_all.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234