CVE-2015-1325

Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
canonicalCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
canonicalubuntu_linux
15.04
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
apport
zesty
Fixed 2.17.3-0ubuntu1
released
yakkety
Fixed 2.17.3-0ubuntu1
released
xenial
Fixed 2.17.3-0ubuntu1
released
wily
Fixed 2.17.3-0ubuntu1
released
vivid
Fixed 2.17.2-0ubuntu1.1
released
utopic
Fixed 2.14.7-0ubuntu8.5
released
trusty
Fixed 2.14.1-0ubuntu3.11
released
precise
Fixed 2.0.1-0ubuntu17.9
released
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2015/05/21/10
http://www.securityfocus.com/bid/74769
http://www.ubuntu.com/usn/USN-2609-1
https://www.exploit-db.com/exploits/37088/
http://www.openwall.com/lists/oss-security/2015/05/21/10
http://www.securityfocus.com/bid/74769
http://www.ubuntu.com/usn/USN-2609-1
https://www.exploit-db.com/exploits/37088/