high7.8Public exploit code
CVE-2016-9949
An issue was discovered in Apport before 2.20.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution2016-12-14 · local · linux
Impact
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apport Project | Apport | through 2.20.3 |
| Canonical | Ubuntu Linux | through 12.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95011
- http://www.ubuntu.com/usn/USN-3157-1
- https://bugs.launchpad.net/apport/+bug/1648806
- https://donncha.is/2016/12/compromising-ubuntu-desktop/
- https://github.com/DonnchaC/ubuntu-apport-exploitation
- https://www.exploit-db.com/exploits/40937/
- http://www.securityfocus.com/bid/95011
- http://www.ubuntu.com/usn/USN-3157-1
- https://bugs.launchpad.net/apport/+bug/1648806
- https://donncha.is/2016/12/compromising-ubuntu-desktop/
- https://github.com/DonnchaC/ubuntu-apport-exploitation
- https://www.exploit-db.com/exploits/40937/