CVE-2015-1338

EUVD-2015-1478
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
apport_projectapport
𝑥
≤ 2.18.1
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
15.04
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
apport
precise
Fixed 2.0.1-0ubuntu17.10
released
trusty
Fixed 2.14.1-0ubuntu3.15
released
vivid
Fixed 2.17.2-0ubuntu1.5
released
wily
Fixed 2.19-0ubuntu1
released
xenial
Fixed 2.19-0ubuntu1
released
yakkety
Fixed 2.19-0ubuntu1
released
zesty
Fixed 2.19-0ubuntu1
released