CVE-2023-1326highCWE-269

CVE-2023-1326: falha de alta gravidade em Canonical Ltd. Apport

local privilege escalation in apport-cli

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar apport

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7epss 0.9%
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
Canonical Ltd. · Apport
CVEs relacionadas — Canonical Ltd. Apport

No mesmo produto, das mais perigosas para as menos.

CVE-2022-28653HIGHCVE-2022-28653EPSS 0.4%CVE-2021-3899HIGHCVE-2021-3899EPSS 0.4%CVE-2020-11936LOWCVE-2020-11936EPSS 0.4%CVE-2022-28654MEDIUMCVE-2022-28654EPSS 0.3%CVE-2022-28657HIGHCVE-2022-28657EPSS 0.2%CVE-2022-1242HIGHCVE-2022-1242EPSS 0.2%