CVE-2015-1338 kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log...
HighCVSS 7.2
EPSS 0.91%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apport project apport | <= 2.18.1 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150927 Apport kernel_crashdump symlink vulnerability exploitation mailing-list
- www.halfdog.net exploit
- USN-2744-1 vendor-advisory
- bugs.launchpad.net
- launchpad.net patch
- 38353 exploit