Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2015-1341

Apport privilege escalation through Python module imports

Description

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubuntu Apport

  • unspecified to < 2.0.1-0ubuntu17.13affected
  • unspecified to < 2.19.1-0ubuntu4affected
  • unspecified to < 2.17.2-0ubuntu1.7affected
  • unspecified to < 2.14.1-0ubuntu3.18affected
  • unspecified to < 2.19.2affected

References