PT-2016-7887 · Canonical · Apport-Gtk+2

Donncha Ocearbhaill · Publicado 2016-12-14 · Atualizado 2017-01-07 · CVE-2016-9951

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apport versions prior to 2.20.4

Description An issue was discovered where a malicious Apport crash file can contain a restart command in RespawnCommand or ProcCmdline fields, which will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file.

Recommendations For Apport versions prior to 2.20.4, the fix is to only show the Relaunch button on Apport crash files generated by local systems, and hide the Relaunch button when crash files are opened directly in Apport-GTK.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-9951

USN-3157-1

Produtos afetados

Apport

Apport-Gtk

Ubuntu

Referências · 15

• 🔥 https://github.com/DonnchaC/ubuntu-apport-exploitation · Exploit
• 🔥 https://exploit-db.com/exploits/40937 · Exploit
• 🔥 https://donncha.is/2016/12/compromising-ubuntu-desktop · Exploit
• https://osv.dev/vulnerability/USN-3157-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9951 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3157-1 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-3157-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-9951 · Nota de Segurança
• https://bugs.launchpad.net/apport/+bug/1648806 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9951 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-9949 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-9951 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9951 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-9950 · Aviso do Fabricante
• http://securityfocus.com/bid/95011 · Nota