CVE-2015-1338: High severity ubuntu python3-apport vulnerability
kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1338?
CVE-2015-1338 is considered to have a medium severity due to its potential for denial of service and privilege escalation.
How do I fix CVE-2015-1338?
To fix CVE-2015-1338, update Apport to version 2.19 or later, or apply relevant patches provided by your Linux distribution.
What systems are affected by CVE-2015-1338?
CVE-2015-1338 affects Apport versions before 2.19 on Ubuntu Linux versions 12.04, 14.04, and 15.04.
What type of attacks can be performed using CVE-2015-1338?
CVE-2015-1338 allows local users to conduct symlink and hard link attacks leading to denial of service or possible privilege escalation.
Is CVE-2015-1338 a remote or local vulnerability?
CVE-2015-1338 is a local vulnerability that requires local access to exploit.