CVE-2015-1318 Privilege escalation in n/a

What is CVE-2015-1318?

CVE-2015-1318 is a high-severity vulnerability in n/a, published on 17 Apr 2015. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

Weakness: CWE-264

Which versions are affected by CVE-2015-1318?

It affects 1 product.

Products include Apport Project Apport.

How do I fix CVE-2015-1318?

Apply the vendor's patch.

Is CVE-2015-1318 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2015-1318 exists.

Public exploit code: 1 Metasploit module, 4 Exploit-DB entries and 1 proofs of concept on GitHub.

Other vulnerabilities in n/a

• CVE-2022-28657 Denial of service in Apport High 7.8
• CVE-2018-6552 Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing High 7.8
• CVE-2017-14177 Privilege escalation in Apport High 7.8
• CVE-2017-14179 Privilege escalation in Apport High 7.8
• CVE-2017-14180 Privilege escalation in Apport High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cpww-w9jx-qp3p, UBUNTU-CVE-2015-1318, USN-2569-1.