CVE-2015-1341: Apport privilege escalation through Python module imports
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2015-1341?
CVE-2015-1341 is a vulnerability that allows any Python module in sys.path to be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.
How severe is CVE-2015-1341?
CVE-2015-1341 has a severity rating of 7.8 (high).
Which software versions are affected by CVE-2015-1341?
CVE-2015-1341 affects Canonical Ubuntu Linux 12.04 LTS, 14.04 LTS, 15.04, and 15.10, as well as Canonical Apport up to version 2.19.2.
How can I fix CVE-2015-1341?
To fix CVE-2015-1341, update to Apport version 2.19.2 or later.
Where can I find more information about CVE-2015-1341?
You can find more information about CVE-2015-1341 at the following references: [Link 1](https://launchpad.net/apport/trunk/2.19.2), [Link 2](https://usn.ubuntu.com/2782-1/).