CVE-2015-1318

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

4.19% chance of exploitation in the next 30 days, 90th percentile

Published

2015-04-17

Updated

2025-11-03

Proof-of-concept exploits (1)

• ScottyBauer/CVE-2015-13184★ · 2015-04-17

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/apport_abrt_chroot_p…

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/43971
• https://www.exploit-db.com/exploits/36746
• https://www.exploit-db.com/exploits/36782

References

• CVE Record
• NVD entry

Related

• CVE-2015-1313
• CVE-2015-1325
• CVE-2015-1305
• CVE-2015-1328
• CVE-2015-1265
• CVE-2015-1336