CVE-2016-9949 An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to...
HighCVSS 7.8
EPSS 17.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apport project apport | <= 2.20.3 | No fix listed |
| Canonical Ubuntu Linux | <= 12.10 | No fix listed |
References
- 95011 third-party-advisory vdb-entry
- USN-3157-1 vendor-advisory
- bugs.launchpad.net issue-tracking patch
- donncha.is exploit technical-description third-party-advisory
- github.com issue-tracking third-party-advisory
- 40937 exploit