CVE-2016-9951 Command injection in n/a

What is CVE-2016-9951?

CVE-2016-9951 is a medium-severity command injection vulnerability in n/a, published on 17 Dec 2016. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the Relaunch button on Apport crash files generated by local systems. The Relaunch button will be hidden when crash files are opened directly in Apport-GTK.

Weakness: CWE-284

Which versions are affected by CVE-2016-9951?

It affects 1 product.

Products include Apport Project Apport.

How do I fix CVE-2016-9951?

Apply the vendor's patch.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2016-9951 being exploited?

There is no known exploitation of CVE-2016-9951 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2022-28657 Denial of service in Apport High 7.8
• CVE-2018-6552 Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing High 7.8
• CVE-2017-14177 Privilege escalation in Apport High 7.8
• CVE-2017-14179 Privilege escalation in Apport High 7.8
• CVE-2017-14180 Privilege escalation in Apport High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-666r-6mfg-455c, UBUNTU-CVE-2016-9951.