CVE-2015-1341
7.4
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Summary
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Ubuntu | Apport | unspecified < 2.0.1-0ubuntu17.13 | affected |
| Ubuntu | Apport | unspecified < 2.19.1-0ubuntu4 | affected |
| Ubuntu | Apport | unspecified < 2.17.2-0ubuntu1.7 | affected |
| Ubuntu | Apport | unspecified < 2.14.1-0ubuntu3.18 | affected |
| Ubuntu | Apport | unspecified < 2.19.2 | affected |
Weaknesses
- Parsing a Python module by executing the module.
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.