← Vulnerability feed

Vulnerability record · CVE-2018-6552 · published 31 May 2018

CVE-2018-6552: Apport project apport vulnerability

Apport Project · Apport

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.

7.8 CVSS 3.0 High EPSS 0.39% · top 69.6%
7.8CVSS 3.0 base score, v2 7.2
0.39%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://usn.ubuntu.com/3664-2/ Vendor Advisory
https://usn.ubuntu.com/usn/usn-3664-1 Vendor Advisory
https://usn.ubuntu.com/3664-2/ Vendor Advisory
https://usn.ubuntu.com/usn/usn-3664-1 Vendor Advisory

Track CVE-2018-6552 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-28657Apport project apport uncontrolled resource consumption vulnerabilityApport does not disable python crash handler before entering chrootEPSS 0.23%7.8CVE-2019-11481Canonical ubuntu linux link following vulnerabilityKevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic …EPSS 0.45%7.8CVE-2017-14177Apport project apport uncontrolled resource consumption vulnerabilityApport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker…EPSS 0.39%7.8CVE-2017-14179Apport project apport uncontrolled resource consumption vulnerabilityApport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an at…EPSS 0.36%7.8CVE-2017-14180Apport project apport uncontrolled resource consumption vulnerabilityApport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root whi…EPSS 0.44%7.8CVE-2017-10708Apport project apport path traversal vulnerabilityAn issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package …EPSS 2.1%7.8CVE-2016-9949Apport project apport code injection vulnerabilityAn issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it…EPSS 18%7.8CVE-2016-9950Apport project apport path traversal vulnerabilityAn issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These…EPSS 6.5%

Source: NIST National Vulnerability Database (record CVE-2018-6552), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.