CVE-2019-11482 — Time-of-check Time-of-use (TOCTOU) Race Condition in Apport
Severity
4.7MEDIUMNVD
CNA4.2OSV7.8
EPSS
0.1%
top 74.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 8
Latest updateMay 24
Description
Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.0 | Impact: 3.6
Affected Packages2 packages
Also affects: Ubuntu Linux 14.04, 16.04, 18.04, 19.04, 19.10
🔴Vulnerability Details
9GHSA▶
GHSA-fggm-83vw-5vwq: Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitr↗2022-05-24