CVE-2017-14177: High severity Apport Project Apport vulnerability
Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14177?
CVE-2017-14177 has a moderate severity, allowing local users to potentially gain root privileges or cause denial of service.
How do I fix CVE-2017-14177?
To fix CVE-2017-14177, upgrade Apport to versions 2.20.8 or later for affected Ubuntu releases.
Which Ubuntu versions are affected by CVE-2017-14177?
CVE-2017-14177 affects Ubuntu releases using Apport versions up to 2.20.7, specifically 14.04, 16.04, 17.04, 17.10, and 18.04.
What types of exploits are possible with CVE-2017-14177?
Exploitation of CVE-2017-14177 can allow an attacker to create files as root, potentially leading to resource exhaustion or privilege escalation.
Is a patch available for CVE-2017-14177?
Yes, a patch is available by upgrading Apport to an unaffected version based on your Ubuntu distribution.