Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Ubuntu 14.10 LTS: USN-2569-1 Moderate: Apport Privilege Escalation

ubuntu
Calendar Grey April 14, 2015
Dist Ubuntu Esm H88
A security flaw within the Apport tool in Ubuntu may enable local users to execute applications with elevated privileges. It's advisable to apply updates promptly.
Apport could be tricked into running programs as an administrator.

Summary

Apport could be tricked into running programs as an administrator.

Software Description:

- apport: automatically generate crash reports for debugging

Details:

Stéphane Graber and Tavis Ormandy independently discovered that Apport

incorrectly handled the crash reporting feature. A local attacker could use

this issue to gain elevated privileges.

Topics%20covered

Topics Covered

security advisory security issue software update privilege escalation Ubuntu elevation of privileges apport

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  apport                          2.14.7-0ubuntu8.3

Ubuntu 14.04 LTS:
  apport                          2.14.1-0ubuntu3.9

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2569-1

CVE-2015-1318

Severity
important
Lowest
Low
Medium
High
Critical

April 14, 2015

Topics%20covered

Topics Covered

security advisory security issue software update privilege escalation Ubuntu elevation of privileges apport

Package Information

https://launchpad.net/ubuntu/+source/apport/2.14.7-0ubuntu8.3
https://launchpad.net/ubuntu/+source/apport/2.14.1-0ubuntu3.9

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.