Security Advisory

CVE-2017-14177

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-02-02 14:00:00
Last updated 2024-09-17 00:15:35
Assigner canonical
CVSS score not scored
State PUBLISHED

Description

Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324.