← Back

CVE-2023-1326

nvd nist
Published: Apr 13, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.

Affected (5)

2 products
Apport
Ubuntu Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Up to 2.26.0
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 18.04
Version 20.04
Version 22.04
Version 22.10

References (4)

Source: security@ubuntu.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.