Vulnerability-Lookup

UBUNTU-CVE-2018-6552 (CVE-2018-6552)

Vulnerability from osv_ubuntu – Published: 2018-05-30 18:00 – Updated: 2025-07-16 04:53 – Source website

Details

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc// does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc// does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.

Severity

7.8 (High)


                    
                      CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      high

References

URL

Type

	https://ubuntu.com/security/CVE-2018-6552	REPORT
	http://www.sbosnet.nl/	REPORT
	https://ubuntu.com/security/notices/USN-3664-1	ADVISORY
	https://ubuntu.com/security/notices/USN-3664-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-6552	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.14.1-0ubuntu3.29?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.14.1-0ubuntu3.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.12.5-0ubuntu2",
        "2.12.6-0ubuntu1",
        "2.12.7-0ubuntu1",
        "2.12.7-0ubuntu2",
        "2.12.7-0ubuntu3",
        "2.12.7-0ubuntu6",
        "2.13.1-0ubuntu1",
        "2.13.1-0ubuntu2",
        "2.13.2-0ubuntu2",
        "2.13.2-0ubuntu3",
        "2.13.2-0ubuntu4",
        "2.13.2-0ubuntu5",
        "2.13.3-0ubuntu1",
        "2.14-0ubuntu1",
        "2.14.1-0ubuntu1",
        "2.14.1-0ubuntu2",
        "2.14.1-0ubuntu3",
        "2.14.1-0ubuntu3.1",
        "2.14.1-0ubuntu3.2",
        "2.14.1-0ubuntu3.3",
        "2.14.1-0ubuntu3.4",
        "2.14.1-0ubuntu3.5",
        "2.14.1-0ubuntu3.6",
        "2.14.1-0ubuntu3.7",
        "2.14.1-0ubuntu3.8",
        "2.14.1-0ubuntu3.9",
        "2.14.1-0ubuntu3.10",
        "2.14.1-0ubuntu3.11",
        "2.14.1-0ubuntu3.12",
        "2.14.1-0ubuntu3.13",
        "2.14.1-0ubuntu3.15",
        "2.14.1-0ubuntu3.16",
        "2.14.1-0ubuntu3.18",
        "2.14.1-0ubuntu3.19",
        "2.14.1-0ubuntu3.20",
        "2.14.1-0ubuntu3.21",
        "2.14.1-0ubuntu3.23",
        "2.14.1-0ubuntu3.24",
        "2.14.1-0ubuntu3.25",
        "2.14.1-0ubuntu3.27",
        "2.14.1-0ubuntu3.28"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.1-0ubuntu2.18?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.1-0ubuntu2.18"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.19.1-0ubuntu3",
        "2.19.2-0ubuntu1",
        "2.19.2-0ubuntu2",
        "2.19.2-0ubuntu3",
        "2.19.2-0ubuntu4",
        "2.19.2-0ubuntu5",
        "2.19.2-0ubuntu6",
        "2.19.2-0ubuntu8",
        "2.19.2-0ubuntu9",
        "2.19.3-0ubuntu1",
        "2.19.3-0ubuntu2",
        "2.19.3-0ubuntu3",
        "2.19.4-0ubuntu1",
        "2.19.4-0ubuntu2",
        "2.20-0ubuntu2",
        "2.20-0ubuntu3",
        "2.20.1-0ubuntu1",
        "2.20.1-0ubuntu2",
        "2.20.1-0ubuntu2.1",
        "2.20.1-0ubuntu2.2",
        "2.20.1-0ubuntu2.4",
        "2.20.1-0ubuntu2.5",
        "2.20.1-0ubuntu2.6",
        "2.20.1-0ubuntu2.9",
        "2.20.1-0ubuntu2.10",
        "2.20.1-0ubuntu2.12",
        "2.20.1-0ubuntu2.13",
        "2.20.1-0ubuntu2.14",
        "2.20.1-0ubuntu2.15",
        "2.20.1-0ubuntu2.16",
        "2.20.1-0ubuntu2.17"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.9-0ubuntu7.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.9-0ubuntu7.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.20.7-0ubuntu3",
        "2.20.7-0ubuntu3.1",
        "2.20.7-0ubuntu4",
        "2.20.8-0ubuntu1",
        "2.20.8-0ubuntu2",
        "2.20.8-0ubuntu3",
        "2.20.8-0ubuntu4",
        "2.20.8-0ubuntu5",
        "2.20.8-0ubuntu6",
        "2.20.8-0ubuntu7",
        "2.20.8-0ubuntu8",
        "2.20.8-0ubuntu9",
        "2.20.8-0ubuntu10",
        "2.20.9-0ubuntu1",
        "2.20.9-0ubuntu2",
        "2.20.9-0ubuntu4",
        "2.20.9-0ubuntu5",
        "2.20.9-0ubuntu6",
        "2.20.9-0ubuntu7"
      ]
    }
  ],
  "aliases": [],
  "details": "Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/\u003cglobal pid\u003e/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/\u003cglobal pid\u003e/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.",
  "id": "UBUNTU-CVE-2018-6552",
  "modified": "2025-07-16T04:53:36Z",
  "published": "2018-05-30T18:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-6552"
    },
    {
      "type": "REPORT",
      "url": "http://www.sbosnet.nl/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-6552"
    }
  ],
  "related": [
    "USN-3664-1",
    "USN-3664-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "high",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-6552"
  ]
}

CVE-2018-6552 (GCVE-0-2018-6552)

Vulnerability from cvelistv5 – Published: 2018-05-31 22:00 – Updated: 2024-09-17 03:07

Title

Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

Summary

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.

Severity

No CVSS data available.

CWE

Denial of service via resource exhaustion, privilege escalation, and escape from containers

Assigner

canonical mitre root

References

2 references

URL	Tags
https://usn.ubuntu.com/usn/usn-3664-1	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3664-2/	vendor-advisoryx_refsource_UBUNTU

Impacted products

4 products

Vendor	Product	Version
n/a	Apport	Affected: 2.20.8-0ubuntu4 , < unspecified (custom) Affected: unspecified , < 2.20.9-0ubuntu7.1 (custom)
n/a	Apport	Affected: 2.20.1-0ubuntu2.15 , < unspecified (custom) Affected: unspecified , < 2.20.1-0ubuntu2.18 (custom)
n/a	Apport	Affected: 2.20.7-0ubuntu3.7 , < unspecified (custom) Affected: unspecified , < 2.20.7-0ubuntu3.9 (custom)
n/a	Apport	Affected: 2.14.1-0ubuntu3.28

Date Public

2018-05-30 00:00

Credits

Sander Bos

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:10:10.228Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3664-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/usn/usn-3664-1"
          },
          {
            "name": "USN-3664-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3664-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Ubuntu 18.04"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "2.20.8-0ubuntu4",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.9-0ubuntu7.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Ubuntu 16.04"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "2.20.1-0ubuntu2.15",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.1-0ubuntu2.18",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Ubuntu 17.10"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "2.20.7-0ubuntu3.7",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.7-0ubuntu3.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Ubuntu 14.04"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "2.14.1-0ubuntu3.28"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Sander Bos"
        }
      ],
      "datePublic": "2018-05-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/\u003cglobal pid\u003e/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/\u003cglobal pid\u003e/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of service via resource exhaustion, privilege escalation, and escape from containers",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-08T18:57:01.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "name": "USN-3664-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/usn/usn-3664-1"
        },
        {
          "name": "USN-3664-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3664-2/"
        }
      ],
      "source": {
        "advisory": "USN-3664-1",
        "defect": [
          "1746668"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Apport treats the container PID as the global PID when /proc/\u003cglobal_pid\u003e/  is missing",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "DATE_PUBLIC": "2018-05-30T18:00:00.000Z",
          "ID": "CVE-2018-6552",
          "STATE": "PUBLIC",
          "TITLE": "Apport treats the container PID as the global PID when /proc/\u003cglobal_pid\u003e/  is missing"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Apport",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003e=",
                            "platform": "Ubuntu 18.04",
                            "version_affected": "\u003e=",
                            "version_value": "2.20.8-0ubuntu4"
                          },
                          {
                            "affected": "\u003c",
                            "platform": "Ubuntu 18.04",
                            "version_affected": "\u003c",
                            "version_value": "2.20.9-0ubuntu7.1"
                          },
                          {
                            "affected": "\u003e=",
                            "platform": "Ubuntu 16.04",
                            "version_affected": "\u003e=",
                            "version_value": "2.20.1-0ubuntu2.15"
                          },
                          {
                            "affected": "\u003c",
                            "platform": "Ubuntu 16.04",
                            "version_affected": "\u003c",
                            "version_value": "2.20.1-0ubuntu2.18"
                          },
                          {
                            "affected": "\u003e=",
                            "platform": "Ubuntu 17.10",
                            "version_affected": "\u003e=",
                            "version_value": "2.20.7-0ubuntu3.7"
                          },
                          {
                            "affected": "\u003c",
                            "platform": "Ubuntu 17.10",
                            "version_affected": "\u003c",
                            "version_value": "2.20.7-0ubuntu3.9"
                          },
                          {
                            "affected": "=",
                            "platform": "Ubuntu 14.04",
                            "version_affected": "=",
                            "version_value": "2.14.1-0ubuntu3.28"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Sander Bos"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/\u003cglobal pid\u003e/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/\u003cglobal pid\u003e/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of service via resource exhaustion, privilege escalation, and escape from containers"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3664-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/usn/usn-3664-1"
            },
            {
              "name": "USN-3664-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3664-2/"
            }
          ]
        },
        "source": {
          "advisory": "USN-3664-1",
          "defect": [
            "1746668"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2018-6552",
    "datePublished": "2018-05-31T22:00:00.000Z",
    "dateReserved": "2018-02-02T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:07:21.752Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

USN-3664-1 (UBUNTU-CVE-2018-6552)

Vulnerability from osv_ubuntu – Published: 2018-05-30 17:13 – Updated: 2026-02-10 04:41 – Source website

Summary

apport vulnerability

Details

Sander Bos discovered that Apport incorrectly handled core dumps when certain files are missing from /proc. A local attacker could possibly use this issue to cause a denial of service, gain root privileges, or escape from containers.

References

URL

Type

	https://ubuntu.com/security/notices/USN-3664-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-6552	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-6552",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.1-0ubuntu2.18?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.1-0ubuntu2.18"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.19.1-0ubuntu3",
        "2.19.2-0ubuntu1",
        "2.19.2-0ubuntu2",
        "2.19.2-0ubuntu3",
        "2.19.2-0ubuntu4",
        "2.19.2-0ubuntu5",
        "2.19.2-0ubuntu6",
        "2.19.2-0ubuntu8",
        "2.19.2-0ubuntu9",
        "2.19.3-0ubuntu1",
        "2.19.3-0ubuntu2",
        "2.19.3-0ubuntu3",
        "2.19.4-0ubuntu1",
        "2.19.4-0ubuntu2",
        "2.20-0ubuntu2",
        "2.20-0ubuntu3",
        "2.20.1-0ubuntu1",
        "2.20.1-0ubuntu2",
        "2.20.1-0ubuntu2.1",
        "2.20.1-0ubuntu2.2",
        "2.20.1-0ubuntu2.4",
        "2.20.1-0ubuntu2.5",
        "2.20.1-0ubuntu2.6",
        "2.20.1-0ubuntu2.9",
        "2.20.1-0ubuntu2.10",
        "2.20.1-0ubuntu2.12",
        "2.20.1-0ubuntu2.13",
        "2.20.1-0ubuntu2.14",
        "2.20.1-0ubuntu2.15",
        "2.20.1-0ubuntu2.16",
        "2.20.1-0ubuntu2.17"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-6552",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.9-0ubuntu7.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.9-0ubuntu7.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.20.7-0ubuntu3",
        "2.20.7-0ubuntu3.1",
        "2.20.7-0ubuntu4",
        "2.20.8-0ubuntu1",
        "2.20.8-0ubuntu2",
        "2.20.8-0ubuntu3",
        "2.20.8-0ubuntu4",
        "2.20.8-0ubuntu5",
        "2.20.8-0ubuntu6",
        "2.20.8-0ubuntu7",
        "2.20.8-0ubuntu8",
        "2.20.8-0ubuntu9",
        "2.20.8-0ubuntu10",
        "2.20.9-0ubuntu1",
        "2.20.9-0ubuntu2",
        "2.20.9-0ubuntu4",
        "2.20.9-0ubuntu5",
        "2.20.9-0ubuntu6",
        "2.20.9-0ubuntu7"
      ]
    }
  ],
  "aliases": [],
  "details": "Sander Bos discovered that Apport incorrectly handled core dumps when\ncertain files are missing from /proc. A local attacker could possibly use\nthis issue to cause a denial of service, gain root privileges, or escape\nfrom containers.\n",
  "id": "USN-3664-1",
  "modified": "2026-02-10T04:41:21Z",
  "published": "2018-05-30T17:13:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-6552"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "apport vulnerability",
  "upstream": [
    "UBUNTU-CVE-2018-6552"
  ]
}

USN-3664-2 (UBUNTU-CVE-2018-6552)

Vulnerability from osv_ubuntu – Published: 2018-06-04 16:39 – Updated: 2026-02-10 04:41 – Source website

Summary

apport vulnerability

Details

USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu 14.04 LTS was also vulnerable to this issue, but was incorrectly omitted from the previous updates. This update provides the corresponding update for Ubuntu 14.04 LTS.

Original advisory details:

References

URL

Type

	https://ubuntu.com/security/notices/USN-3664-2	ADVISORY
	https://ubuntu.com/security/CVE-2018-6552	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-6552",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.14.1-0ubuntu3.29?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.14.1-0ubuntu3.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.12.5-0ubuntu2",
        "2.12.6-0ubuntu1",
        "2.12.7-0ubuntu1",
        "2.12.7-0ubuntu2",
        "2.12.7-0ubuntu3",
        "2.12.7-0ubuntu6",
        "2.13.1-0ubuntu1",
        "2.13.1-0ubuntu2",
        "2.13.2-0ubuntu2",
        "2.13.2-0ubuntu3",
        "2.13.2-0ubuntu4",
        "2.13.2-0ubuntu5",
        "2.13.3-0ubuntu1",
        "2.14-0ubuntu1",
        "2.14.1-0ubuntu1",
        "2.14.1-0ubuntu2",
        "2.14.1-0ubuntu3",
        "2.14.1-0ubuntu3.1",
        "2.14.1-0ubuntu3.2",
        "2.14.1-0ubuntu3.3",
        "2.14.1-0ubuntu3.4",
        "2.14.1-0ubuntu3.5",
        "2.14.1-0ubuntu3.6",
        "2.14.1-0ubuntu3.7",
        "2.14.1-0ubuntu3.8",
        "2.14.1-0ubuntu3.9",
        "2.14.1-0ubuntu3.10",
        "2.14.1-0ubuntu3.11",
        "2.14.1-0ubuntu3.12",
        "2.14.1-0ubuntu3.13",
        "2.14.1-0ubuntu3.15",
        "2.14.1-0ubuntu3.16",
        "2.14.1-0ubuntu3.18",
        "2.14.1-0ubuntu3.19",
        "2.14.1-0ubuntu3.20",
        "2.14.1-0ubuntu3.21",
        "2.14.1-0ubuntu3.23",
        "2.14.1-0ubuntu3.24",
        "2.14.1-0ubuntu3.25",
        "2.14.1-0ubuntu3.27",
        "2.14.1-0ubuntu3.28"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu\n14.04 LTS was also vulnerable to this issue, but was incorrectly omitted\nfrom the previous updates. This update provides the corresponding update\nfor Ubuntu 14.04 LTS.\n\nOriginal advisory details:\n\n Sander Bos discovered that Apport incorrectly handled core dumps when\n certain files are missing from /proc. A local attacker could possibly use\n this issue to cause a denial of service, gain root privileges, or escape\n from containers.\n",
  "id": "USN-3664-2",
  "modified": "2026-02-10T04:41:21Z",
  "published": "2018-06-04T16:39:21Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-2"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-6552"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "apport vulnerability",
  "upstream": [
    "UBUNTU-CVE-2018-6552"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2018-6552 (CVE-2018-6552)

CVE-2018-6552 (GCVE-0-2018-6552)

USN-3664-1 (UBUNTU-CVE-2018-6552)

USN-3664-2 (UBUNTU-CVE-2018-6552)

Tags

Sightings

Nomenclature

Related by attack behaviour