CVE-2016-9950: Path Traversal
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9950?
CVE-2016-9950 is classified as a medium severity vulnerability due to its path traversal nature that could allow unauthorized file access.
How do I fix CVE-2016-9950?
To fix CVE-2016-9950, update Apport to version 2.20.4 or later.
What systems are affected by CVE-2016-9950?
CVE-2016-9950 affects Apport versions prior to 2.20.4 and Ubuntu Linux versions up to 12.10.
What type of vulnerability is CVE-2016-9950?
CVE-2016-9950 is a path traversal vulnerability that allows an attacker to access unintended files.
Can CVE-2016-9950 be exploited remotely?
Yes, CVE-2016-9950 can potentially be exploited remotely if an attacker can manipulate the Apport crash file.