CVE-2015-1341 HIGH

CVE-2015-1341: Apport privilege escalation through Python module imports

Vendor Ubuntu
Product Apport
Published April 22, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.4/10
Attack vector Physical
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

Description

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

Key dates

Disclosure timeline

April 22, 2019 CVE published
September 16, 2024 Record updated