CVE-2015-1338 Path traversal in n/a
Local attackers can exploit symlink or hard link attacks in Apport to cause disk exhaustion or gain elevated privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-1338?
CVE-2015-1338 is a high-severity path traversal vulnerability in Canonical Ubuntu Linux, published on 1 Oct 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
Weakness: CWE-59
Which versions are affected by CVE-2015-1338?
It affects 2 products.
Linux distribution packages (4)
apport SUSE:Linux Enterprise Server 11 SP4 | All versions | 0.114-12.8.3.1 |
apport-crashdb-sle SUSE:Linux Enterprise Server 11 SP4 | All versions | 0.114-0.8.3.1 |
apport SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 0.114-12.8.3.1 |
apport-crashdb-sle SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 0.114-0.8.3.1 |
Products include Apport Project Apport, Canonical Ubuntu Linux.
How do I fix CVE-2015-1338?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2015-1338 being exploited?
There is no known exploitation of CVE-2015-1338 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as GHSA-77gx-3rjc-296q, SUSE-SU-2017:1938-1, UBUNTU-CVE-2015-1338, USN-2744-1.