CVE-2015-1324

Published: Aug 25, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges by leveraging incorrect handling of permissions when generating core dumps for setuid binaries.

Affected (4)

Products: Canonical: Ubuntu Linux

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Canonical Ubuntu Linux	Version 15.04

Related CWEs

References (6)

http://www.securityfocus.com/bid/74767

Source: security@ubuntu.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2609-1

Source: security@ubuntu.com

PatchVendor Advisory

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239

Source: security@ubuntu.com

Issue TrackingPatchVendor Advisory

http://www.securityfocus.com/bid/74767

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2609-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

Timeline

No history available yet.