CVE-2016-9950 An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package spe...
HighCVSS 7.8
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apport project apport | <= 2.20.3 | No fix listed |
| Canonical Ubuntu Linux | <= 12.10 | No fix listed |
References
- 95011 third-party-advisory vdb-entry
- USN-3157-1 vendor-advisory
- bugs.launchpad.net issue-tracking patch
- donncha.is exploit technical-description third-party-advisory
- github.com issue-tracking third-party-advisory
- 40937 exploit