CVE-2016-9950

An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

6.55% chance of exploitation in the next 30 days, 93th percentile

Published

2016-12-17

Updated

2024-08-06

Proof-of-concept exploits (1)

• DonnchaC/ubuntu-apport-exploitation95★ · 2016-12-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40937

References

• CVE Record
• NVD entry

Related

• CVE-2016-9949
• CVE-2016-9951
• CVE-2016-9936
• CVE-2016-9957
• CVE-2016-9920
• CVE-2016-9958