[{"vendor":"n/a","product":"Apport","platforms":["Ubuntu 18.04"],"versions":[{"version":"2.20.8-0ubuntu4","lessThan":"unspecified","versionType":"custom","status":"affected"},{"version":"unspecified","lessThan":"2.20.9-0ubuntu7.1","versionType":"custom","status":"affected"}]},{"vendor":"n/a","product":"Apport","platforms":["Ubuntu 16.04"],"versions":[{"version":"2.20.1-0ubuntu2.15","lessThan":"unspecified","versionType":"custom","status":"affected"},{"version":"unspecified","lessThan":"2.20.1-0ubuntu2.18","versionType":"custom","status":"affected"}]},{"vendor":"n/a","product":"Apport","platforms":["Ubuntu 17.10"],"versions":[{"version":"2.20.7-0ubuntu3.7","lessThan":"unspecified","versionType":"custom","status":"affected"},{"version":"unspecified","lessThan":"2.20.7-0ubuntu3.9","versionType":"custom","status":"affected"}]},{"vendor":"n/a","product":"Apport","platforms":["Ubuntu 14.04"],"versions":[{"version":"2.14.1-0ubuntu3.28","status":"affected"}]}]

https://usn.ubuntu.com/3664-2/

https://usn.ubuntu.com/usn/usn-3664-1

CWE-399
CWE-399

NVD-CWE-noinfo

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

CWE-399

AND
     OR
          *cpe:2.3:a:apport_project:apport:2.14.1:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

AND
     OR
          *cpe:2.3:a:apport_project:apport:2.20.1:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

AND
     OR
          *cpe:2.3:a:apport_project:apport:2.20.7:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:a:apport_project:apport:2.20.9:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

https://usn.ubuntu.com/3664-2/ No Types Assigned

https://usn.ubuntu.com/3664-2/ Vendor Advisory

https://usn.ubuntu.com/usn/usn-3664-1 No Types Assigned

https://usn.ubuntu.com/usn/usn-3664-1 Vendor Advisory

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, and 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17.

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.

https://usn.ubuntu.com/3664-2/ [No Types Assigned]