[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

USN-2569-2 -- apport vulnerability

ID: oval:org.secpod.oval:def:702512Date: (C)2015-04-20   (M)2022-10-10
Class: PATCHFamily: unix




apport: automatically generate crash reports for debugging Details: USN-2569-1 fixed a vulnerability in Apport. Tavis Ormandy discovered that the fixed packages were still vulnerable to a privilege escalation attack. This update completely disables crash report handling for containers until a more complete solution is available. Original advisory Apport could be tricked into running programs as an administrator.

Platform:
Ubuntu 14.04
Ubuntu 14.10
Product:
apport
Reference:
USN-2569-2
CPE    3
cpe:/o:ubuntu:ubuntu_linux:14.04
cpe:/a:apport:apport
cpe:/o:ubuntu:ubuntu_linux:14.10

© SecPod Technologies