CVE-2016-9949

Published: Dec 17, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.

Affected (2)

Products: Apport Project: Apport · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apport Project Apport	Up to 2.20.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Up to 12.10

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (12)

http://www.securityfocus.com/bid/95011

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3157-1

Source: cve@mitre.org

https://bugs.launchpad.net/apport/+bug/1648806

Source: cve@mitre.org

Issue TrackingPatch

https://donncha.is/2016/12/compromising-ubuntu-desktop/

Source: cve@mitre.org

ExploitTechnical DescriptionThird Party Advisory

https://github.com/DonnchaC/ubuntu-apport-exploitation

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://www.exploit-db.com/exploits/40937/

Source: cve@mitre.org

http://www.securityfocus.com/bid/95011