CVE-2017-10708

An issue was discovered in Apport through 2.20.x

published July 18, 2017

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecting against path traversal. This allows remote attackers to execute arbitrary code via a crafted .crash file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02099 · 81.6th percentile
Published
2017-07-18T20:00Z
EPSS history
Timeline
  • 18 JUL 20:00Z
    An issue was discovered in Apport through 2.20.x
    cvelistv5