PT-2017-3610 · Canonical+1 · Apport+1

Sander Bos · Published 2017-10-21 · Updated 2025-11-03 · CVE-2017-14179

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Apport versions prior to 2.13

Description: The issue is related to uncontrolled resource consumption in the Apport error reporting software in the Ubuntu operating system. Exploitation of this issue could allow an attacker to cause a denial of service, escape from Linux Containers (LXC), or gain root privileges by leveraging files that Apport can create as root in the event of a crash. This can be achieved by local users creating certain files as root, which can then be used to perform malicious actions.

Recommendations: For Apport versions prior to 2.13, update to version 2.13 or later to resolve the issue. As a temporary workaround, consider restricting the use of Apport to minimize the risk of exploitation. Avoid using Apport in environments where it can be exploited by local users until the issue is resolved.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2018-00583

CVE-2017-14179

Affected Products

Apport

Linux Containers

References · 10

• https://bdu.fstec.ru/vul/2018-00583 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-14179 · Security Note
• https://ubuntu.com/security/CVE-2017-14179 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-14179 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-14179 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-14179 · Security Note
• https://launchpad.net/bugs/1726372 · Note
• https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14179 · Note
• https://t.me/cveNotify/141418 · Telegram Post
• http://sbosnet.nl · Note