CVE-2019-11482
Description
Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.
Risk Information
Base Score
4.7
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.087
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| automatically generate crash reports for debugging (USN-4171-1) apport_2.20.9-0ubuntu7.8_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) apport_2.20.1-0ubuntu2.20_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) apport_2.20.11-0ubuntu8.1_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) apport_2.20.10-0ubuntu27.2_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python-apport_2.20.9-0ubuntu7.8_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python-apport_2.20.1-0ubuntu2.20_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python-apport_2.20.11-0ubuntu8.1_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python-apport_2.20.10-0ubuntu27.2_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python3-apport_2.20.9-0ubuntu7.8_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python3-apport_2.20.1-0ubuntu2.20_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python3-apport_2.20.11-0ubuntu8.1_all.deb | Linux |
| automatically generate crash reports for debugging (USN-4171-1) python3-apport_2.20.10-0ubuntu27.2_all.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234