CVE-2023-1326
published 2023-04-13CVE-2023-1326: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow…
PriorityP341high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.87%
55.2th percentile
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apport_project | apport | >= 0 < 2.20.9-0ubuntu7.29 | 2.20.9-0ubuntu7.29 |
| apport_project | apport | >= 0 < 2.20.11-0ubuntu27.26 | 2.20.11-0ubuntu27.26 |
| apport_project | apport | >= 0 < 2.20.11-0ubuntu82.4 | 2.20.11-0ubuntu82.4 |
| canonical | apport | <= 2.26.0 | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical_ltd | apport | <= 2.26.0 | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qgrc-7333-5cgx: A privilege escalation attack was found in apport-cli 2
ghsa_unreviewed·2023-04-14·CVSS 7.8
CVE-2023-1326 [HIGH] CWE-269 GHSA-qgrc-7333-5cgx: A privilege escalation attack was found in apport-cli 2
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
OSV
CVE-2023-1326: A privilege escalation attack was found in apport-cli 2
osv·2023-04-13·CVSS 7.8
CVE-2023-1326 [HIGH] CVE-2023-1326: A privilege escalation attack was found in apport-cli 2
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
Ubuntu
Apport vulnerability
vendor_ubuntu·2023-04-13
CVE-2023-1326 Apport vulnerability
Title: Apport vulnerability
Summary: Apport could be used to escalate privilege on specially configured
systems.
Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation
vulnerability in apport-cli when viewing crash reports and unprivileged
users are allowed to run sudo less. A local attacker on a specially
configured system could use this to escalate their privilege.
Instructions: In general, a standard system update will make all the necessary changes.
No detection rules found.
No public exploits indexed.
CTF
Devvortex / README
ctf_writeups·CVSS 7.7
CVE-2023-23752 [HIGH] Devvortex / README
# Devvortex
> Write-up author: jon-brandy
## Lesson Learned:
- Enumerating subdomain using ffuf.
- Directory listing using dirsearch.
- Exploiting CMS Joomla v4.2 --> CVE-2023-23752.
- Accessing mysql (inline command).
- Cracking password using john.
- Exploiting apport-cli bin for privilege escalation --> CVE-2023-1326.
## STEPS:
> PORT SCANNING
```
┌──(brandy㉿bread-yolk)-[~]
└─$ nmap -p- -sV -sC 10.10.11.242 --min-rate 1000
Starting Nmap 7.93 ( https://nmap.org ) at 2023-12-11 01:23 PST
Nmap scan report for 10.10.11.242
Host is up (0.018s latency).
Not shown: 65533 closed tcp ports (conn-refused)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.9 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 3072 48add5b83a9fbcbef7e8201ef6bfdeae (RSA)
| 256 b7896c0b20ed49b2c18
CTF
easy / README
ctf_writeups·CVSS 6.0
[MEDIUM] easy / README
---
layout: default
title: Easy Machines
parent: Machines
nav_order: 1
description: "120+ Easy HTB machine writeups with walkthroughs"
permalink: /machines/easy/
---
# HackTheBox Easy Machines - Comprehensive Reference
> Complete catalog of retired HTB Easy machines with OS, key vulnerability, attack path summary, and quality writeup links.
**Total: 100+ Easy Machines** | Updated: April 2026
---
## Quick Navigation
- [Classic / Legacy Machines (2017-2019)](#classic--legacy-machines-2017-2019)
- [2019-2020 Machines](#2019-2020-machines)
- [2021 Machines](#2021-machines)
- [2022 Machines](#2022-machines)
- [2023 Machines](#2023-machines)
- [2024 Machines (Season 4 & 5)](#2024-machines-season-4--5)
- [2025-2026 Machines (Season 6+)](#2025-2026-machines-season-6)
---
## Classic / Legac
CTF
Devvortex / README
ctf_writeups·CVSS 7.7
CVE-2023-23752 [HIGH] Devvortex / README
# Devvortex - HackTheBox - Writeup
Linux, 20 Base Points, Easy
## Machine
## TL;DR
To solve this machine, we start by using `nmap` to enumerate open services and find ports `22`, and `80`.
***User***: Identified vhost `dev.Devvortex.htb`. In the `robots.txt` file, `Joomla` is indicated. Utilizing `CVE-2023-23752`, we extracted credentials from the configuration. With these credentials, we gained access and inserted a reverse shell into the `index.php` file within the `Joomla` templates, Found `logan` hashed password on `Joomla` database.
***Root***: Executed `sudo -l` revealing permission to run `apport-cli` as `root`. Leveraging `CVE-2023-1326`, privilege escalation was achieved.
## Devvortex Solution
### User
Let's begin by using `nmap` to scan the target machine:
```console
2023-04-13
Published