CVE-2015-1318

EPSS 4.1%

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

Affected products

n/a · n/a

public PoCs found — 6

githubgithub.com/ScottyBauer/CVE-2015-1318★ 4 cve_referencewww.exploit-db.com/exploits/36782/unverified cve_referencewww.exploit-db.com/exploits/43971/unverified exploitdbwww.exploit-db.com/exploits/36782unverified exploitdbwww.exploit-db.com/exploits/36746unverified exploitdbwww.exploit-db.com/exploits/43971unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758 http://seclists.org/fulldisclosure/2025/Jun/9 https://launchpad.net/apport/trunk/2.17.1 https://www.exploit-db.com/exploits/36782/https://www.exploit-db.com/exploits/43971/http://www.osvdb.org/120803 http://www.ubuntu.com/usn/USN-2569-1