NetSight
high7.8

CVE-2017-14179

Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker cou…

Impact

Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers.

Affected products

VendorProductAffected versions
Apport ProjectApport
before 2.13
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.04, 17.10, 18.04

Weakness classification

References