Ubuntu 22.10 USN-6018-1 Moderate: Apport Privilege Escalation Threat

ubuntu

April 13, 2023

Apport could be used to escalate privilege on specially configured systems.

Summary

Apport could be used to escalate privilege on specially configured

systems.

Software Description:

- apport: automatically generate crash reports for debugging

Details:

Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation

vulnerability in apport-cli when viewing crash reports and unprivileged

users are allowed to run sudo less. A local attacker on a specially

configured system could use this to escalate their privilege.

Topics Covered

security advisory moderate privilege escalation local attack ubuntu apport

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
apport 2.23.1-0ubuntu3.2

Ubuntu 22.04 LTS:
apport 2.20.11-0ubuntu82.4

Ubuntu 20.04 LTS:
apport 2.20.11-0ubuntu27.26

Ubuntu 18.04 LTS:
apport 2.20.9-0ubuntu7.29

In general, a standard system update will make all the necessary changes.