Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2018-02-02T14:00:00Z

Updated: 2024-09-17T00:15:35.899Z

Reserved: 2017-09-07T00:00:00

Link: CVE-2017-14177

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-02-02T14:29:00.263

Modified: 2024-11-21T03:12:18.367

Link: CVE-2017-14177

cve-icon Redhat

No data.