PT-2023-16898 · Unknown+2 · Apport-Cli+2
Chen Lu
+2
·
Published
2023-04-13
·
Updated
2024-02-15
·
CVE-2023-1326
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
apport-cli versions 2.26.0 and earlier
Description
A privilege escalation attack was found, similar to a known issue, which can be exploited by a local attacker if the system is specially configured. This configuration includes allowing unprivileged users to run
sudo apport-cli, having less configured as the pager, and the ability to set the terminal size. It is unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.Recommendations
For apport-cli versions 2.26.0 and earlier, consider restricting the use of
sudo apport-cli to privileged users only, and review the configuration of the pager and terminal settings to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Ubuntu
Apport-Cli