CVE-2015-1341

Apport privilege escalation through Python module imports

High · published April 22, 2019

CVSS v3.0
7.4
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Published
2019-04-22T15:35Z
EPSS history
Timeline
  • 22 APR 15:35Z
    Apport privilege escalation through Python module imports
    cvelistv5