CVE-2019-11483Apport vulnerability

7 documents5 sources
Severity
3.3LOWNVD
CNA7.0
EPSS
0.1%
top 78.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 8
Latest updateMay 24

Description

Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

CVEListV5canonical/apport2.14.12.14.1-0ubuntu3.29+esm2+3
Ubuntuapport_project/apport< 2.20.1-0ubuntu2.20+2

Also affects: Ubuntu Linux 14.04, 16.04, 18.04, 19.04, 19.10

🔴Vulnerability Details

4
GHSA
GHSA-43q8-jq5v-77gp: Sander Bos discovered Apport mishandled crash dumps originating from containers2022-05-24
CVEList
CVE-2019-11483: Sander Bos discovered Apport mishandled crash dumps originating from containers2020-02-08
OSV
apport vulnerabilities2019-10-30
OSV
CVE-2019-11483: Sander Bos discovered Apport mishandled crash dumps originating from containers2019-10-29

📋Vendor Advisories

2
Ubuntu
Apport vulnerabilities2019-11-04
Ubuntu
Apport vulnerabilities2019-10-30
CVE-2019-11483 — Canonical Apport vulnerability | cvebase