CVE-2016-9949
17.12.2016, 03:59
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.| Vendor | Product | Version |
|---|---|---|
| apport_project | apport | 𝑥 ≤ 2.20.3 |
| canonical | ubuntu_linux | 𝑥 ≤ 12.10 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References