← Vulnerability feed

Vulnerability record · CVE-2015-1318 · published 17 April 2015

CVE-2015-1318: Apport project apport permissions and access controls vulnerability

Apport Project · Apport

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

7.2 CVSS 2.0 High EPSS 4.2% · top 9.3% CWE-264 · Permissions and access controls
7.2CVSS 2.0 base score
4.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
13References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.osvdb.org/120803
http://www.ubuntu.com/usn/USN-2569-1
https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758
https://launchpad.net/apport/trunk/2.17.1 Patch
https://www.exploit-db.com/exploits/36782/ Exploit
https://www.exploit-db.com/exploits/43971/
http://seclists.org/fulldisclosure/2025/Jun/9
http://www.osvdb.org/120803
http://www.ubuntu.com/usn/USN-2569-1
https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758
https://launchpad.net/apport/trunk/2.17.1 Patch
https://www.exploit-db.com/exploits/36782/ Exploit
https://www.exploit-db.com/exploits/43971/

Track CVE-2015-1318 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-28657Apport project apport uncontrolled resource consumption vulnerabilityApport does not disable python crash handler before entering chrootEPSS 0.23%7.8CVE-2019-11481Canonical ubuntu linux link following vulnerabilityKevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic …EPSS 0.45%7.8CVE-2018-6552Apport project apport vulnerabilityApport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could…EPSS 0.39%7.8CVE-2017-14179Apport project apport uncontrolled resource consumption vulnerabilityApport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an at…EPSS 0.36%7.8CVE-2017-14180Apport project apport uncontrolled resource consumption vulnerabilityApport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root whi…EPSS 0.44%7.8CVE-2017-14177Apport project apport uncontrolled resource consumption vulnerabilityApport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker…EPSS 0.39%7.8CVE-2017-10708Apport project apport path traversal vulnerabilityAn issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package …EPSS 2.1%7.8CVE-2016-9949Apport project apport code injection vulnerabilityAn issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it…EPSS 18%

Source: NIST National Vulnerability Database (record CVE-2015-1318), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.