Vulnerability-Lookup

ubuntu-cve-2018-6552

Vulnerability from osv_ubuntu

Published

2018-05-30 18:00

Modified

2025-07-16 04:53

Summary

Details

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc// does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc// does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.

Severity

7.8 (High)


                    
                      CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      high

References

URL

Type

	https://ubuntu.com/security/CVE-2018-6552	REPORT
	http://www.sbosnet.nl/	REPORT
	https://ubuntu.com/security/notices/USN-3664-1	ADVISORY
	https://ubuntu.com/security/notices/USN-3664-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-6552	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.14.1-0ubuntu3.29?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.14.1-0ubuntu3.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.12.5-0ubuntu2",
        "2.12.6-0ubuntu1",
        "2.12.7-0ubuntu1",
        "2.12.7-0ubuntu2",
        "2.12.7-0ubuntu3",
        "2.12.7-0ubuntu6",
        "2.13.1-0ubuntu1",
        "2.13.1-0ubuntu2",
        "2.13.2-0ubuntu2",
        "2.13.2-0ubuntu3",
        "2.13.2-0ubuntu4",
        "2.13.2-0ubuntu5",
        "2.13.3-0ubuntu1",
        "2.14-0ubuntu1",
        "2.14.1-0ubuntu1",
        "2.14.1-0ubuntu2",
        "2.14.1-0ubuntu3",
        "2.14.1-0ubuntu3.1",
        "2.14.1-0ubuntu3.2",
        "2.14.1-0ubuntu3.3",
        "2.14.1-0ubuntu3.4",
        "2.14.1-0ubuntu3.5",
        "2.14.1-0ubuntu3.6",
        "2.14.1-0ubuntu3.7",
        "2.14.1-0ubuntu3.8",
        "2.14.1-0ubuntu3.9",
        "2.14.1-0ubuntu3.10",
        "2.14.1-0ubuntu3.11",
        "2.14.1-0ubuntu3.12",
        "2.14.1-0ubuntu3.13",
        "2.14.1-0ubuntu3.15",
        "2.14.1-0ubuntu3.16",
        "2.14.1-0ubuntu3.18",
        "2.14.1-0ubuntu3.19",
        "2.14.1-0ubuntu3.20",
        "2.14.1-0ubuntu3.21",
        "2.14.1-0ubuntu3.23",
        "2.14.1-0ubuntu3.24",
        "2.14.1-0ubuntu3.25",
        "2.14.1-0ubuntu3.27",
        "2.14.1-0ubuntu3.28"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.1-0ubuntu2.18?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.1-0ubuntu2.18"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.19.1-0ubuntu3",
        "2.19.2-0ubuntu1",
        "2.19.2-0ubuntu2",
        "2.19.2-0ubuntu3",
        "2.19.2-0ubuntu4",
        "2.19.2-0ubuntu5",
        "2.19.2-0ubuntu6",
        "2.19.2-0ubuntu8",
        "2.19.2-0ubuntu9",
        "2.19.3-0ubuntu1",
        "2.19.3-0ubuntu2",
        "2.19.3-0ubuntu3",
        "2.19.4-0ubuntu1",
        "2.19.4-0ubuntu2",
        "2.20-0ubuntu2",
        "2.20-0ubuntu3",
        "2.20.1-0ubuntu1",
        "2.20.1-0ubuntu2",
        "2.20.1-0ubuntu2.1",
        "2.20.1-0ubuntu2.2",
        "2.20.1-0ubuntu2.4",
        "2.20.1-0ubuntu2.5",
        "2.20.1-0ubuntu2.6",
        "2.20.1-0ubuntu2.9",
        "2.20.1-0ubuntu2.10",
        "2.20.1-0ubuntu2.12",
        "2.20.1-0ubuntu2.13",
        "2.20.1-0ubuntu2.14",
        "2.20.1-0ubuntu2.15",
        "2.20.1-0ubuntu2.16",
        "2.20.1-0ubuntu2.17"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.9-0ubuntu7.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.9-0ubuntu7.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.20.7-0ubuntu3",
        "2.20.7-0ubuntu3.1",
        "2.20.7-0ubuntu4",
        "2.20.8-0ubuntu1",
        "2.20.8-0ubuntu2",
        "2.20.8-0ubuntu3",
        "2.20.8-0ubuntu4",
        "2.20.8-0ubuntu5",
        "2.20.8-0ubuntu6",
        "2.20.8-0ubuntu7",
        "2.20.8-0ubuntu8",
        "2.20.8-0ubuntu9",
        "2.20.8-0ubuntu10",
        "2.20.9-0ubuntu1",
        "2.20.9-0ubuntu2",
        "2.20.9-0ubuntu4",
        "2.20.9-0ubuntu5",
        "2.20.9-0ubuntu6",
        "2.20.9-0ubuntu7"
      ]
    }
  ],
  "aliases": [],
  "details": "Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/\u003cglobal pid\u003e/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/\u003cglobal pid\u003e/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.",
  "id": "UBUNTU-CVE-2018-6552",
  "modified": "2025-07-16T04:53:36Z",
  "published": "2018-05-30T18:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-6552"
    },
    {
      "type": "REPORT",
      "url": "http://www.sbosnet.nl/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-6552"
    }
  ],
  "related": [
    "USN-3664-1",
    "USN-3664-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "high",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-6552"
  ]
}

CVE-2018-6552 (GCVE-0-2018-6552)

Vulnerability from cvelistv5 – Published: 2018-05-31 22:00 – Updated: 2024-09-17 03:07

Title

Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

Summary

Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.

Severity

No CVSS data available.

CWE

Denial of service via resource exhaustion, privilege escalation, and escape from containers

Assigner

canonical

References

2 references

URL	Tags
https://usn.ubuntu.com/usn/usn-3664-1	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3664-2/	vendor-advisoryx_refsource_UBUNTU

Impacted products

4 products

Vendor	Product	Version
n/a	Apport	Affected: 2.20.8-0ubuntu4 , < unspecified (custom) Affected: unspecified , < 2.20.9-0ubuntu7.1 (custom)
n/a	Apport	Affected: 2.20.1-0ubuntu2.15 , < unspecified (custom) Affected: unspecified , < 2.20.1-0ubuntu2.18 (custom)
n/a	Apport	Affected: 2.20.7-0ubuntu3.7 , < unspecified (custom) Affected: unspecified , < 2.20.7-0ubuntu3.9 (custom)
n/a	Apport	Affected: 2.14.1-0ubuntu3.28

Date Public

2018-05-30 00:00

Credits

Sander Bos

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:10:10.228Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3664-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/usn/usn-3664-1"
          },
          {
            "name": "USN-3664-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3664-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Ubuntu 18.04"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "2.20.8-0ubuntu4",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.9-0ubuntu7.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Ubuntu 16.04"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "2.20.1-0ubuntu2.15",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.1-0ubuntu2.18",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Ubuntu 17.10"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "2.20.7-0ubuntu3.7",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.7-0ubuntu3.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Ubuntu 14.04"
          ],
          "product": "Apport",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "2.14.1-0ubuntu3.28"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Sander Bos"
        }
      ],
      "datePublic": "2018-05-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/\u003cglobal pid\u003e/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/\u003cglobal pid\u003e/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of service via resource exhaustion, privilege escalation, and escape from containers",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-08T18:57:01.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "name": "USN-3664-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/usn/usn-3664-1"
        },
        {
          "name": "USN-3664-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3664-2/"
        }
      ],
      "source": {
        "advisory": "USN-3664-1",
        "defect": [
          "1746668"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Apport treats the container PID as the global PID when /proc/\u003cglobal_pid\u003e/  is missing",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "DATE_PUBLIC": "2018-05-30T18:00:00.000Z",
          "ID": "CVE-2018-6552",
          "STATE": "PUBLIC",
          "TITLE": "Apport treats the container PID as the global PID when /proc/\u003cglobal_pid\u003e/  is missing"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Apport",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003e=",
                            "platform": "Ubuntu 18.04",
                            "version_affected": "\u003e=",
                            "version_value": "2.20.8-0ubuntu4"
                          },
                          {
                            "affected": "\u003c",
                            "platform": "Ubuntu 18.04",
                            "version_affected": "\u003c",
                            "version_value": "2.20.9-0ubuntu7.1"
                          },
                          {
                            "affected": "\u003e=",
                            "platform": "Ubuntu 16.04",
                            "version_affected": "\u003e=",
                            "version_value": "2.20.1-0ubuntu2.15"
                          },
                          {
                            "affected": "\u003c",
                            "platform": "Ubuntu 16.04",
                            "version_affected": "\u003c",
                            "version_value": "2.20.1-0ubuntu2.18"
                          },
                          {
                            "affected": "\u003e=",
                            "platform": "Ubuntu 17.10",
                            "version_affected": "\u003e=",
                            "version_value": "2.20.7-0ubuntu3.7"
                          },
                          {
                            "affected": "\u003c",
                            "platform": "Ubuntu 17.10",
                            "version_affected": "\u003c",
                            "version_value": "2.20.7-0ubuntu3.9"
                          },
                          {
                            "affected": "=",
                            "platform": "Ubuntu 14.04",
                            "version_affected": "=",
                            "version_value": "2.14.1-0ubuntu3.28"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Sander Bos"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/\u003cglobal pid\u003e/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/\u003cglobal pid\u003e/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of service via resource exhaustion, privilege escalation, and escape from containers"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3664-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/usn/usn-3664-1"
            },
            {
              "name": "USN-3664-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3664-2/"
            }
          ]
        },
        "source": {
          "advisory": "USN-3664-1",
          "defect": [
            "1746668"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2018-6552",
    "datePublished": "2018-05-31T22:00:00.000Z",
    "dateReserved": "2018-02-02T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:07:21.752Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

usn-3664-1

Vulnerability from osv_ubuntu

Published

2018-05-30 17:13

Modified

2026-02-10 04:41

Summary

apport vulnerability

Details

Sander Bos discovered that Apport incorrectly handled core dumps when certain files are missing from /proc. A local attacker could possibly use this issue to cause a denial of service, gain root privileges, or escape from containers.

References

URL

Type

	https://ubuntu.com/security/notices/USN-3664-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-6552	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-6552",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.1-0ubuntu2.18"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.1-0ubuntu2.18"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.1-0ubuntu2.18?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.1-0ubuntu2.18"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.19.1-0ubuntu3",
        "2.19.2-0ubuntu1",
        "2.19.2-0ubuntu2",
        "2.19.2-0ubuntu3",
        "2.19.2-0ubuntu4",
        "2.19.2-0ubuntu5",
        "2.19.2-0ubuntu6",
        "2.19.2-0ubuntu8",
        "2.19.2-0ubuntu9",
        "2.19.3-0ubuntu1",
        "2.19.3-0ubuntu2",
        "2.19.3-0ubuntu3",
        "2.19.4-0ubuntu1",
        "2.19.4-0ubuntu2",
        "2.20-0ubuntu2",
        "2.20-0ubuntu3",
        "2.20.1-0ubuntu1",
        "2.20.1-0ubuntu2",
        "2.20.1-0ubuntu2.1",
        "2.20.1-0ubuntu2.2",
        "2.20.1-0ubuntu2.4",
        "2.20.1-0ubuntu2.5",
        "2.20.1-0ubuntu2.6",
        "2.20.1-0ubuntu2.9",
        "2.20.1-0ubuntu2.10",
        "2.20.1-0ubuntu2.12",
        "2.20.1-0ubuntu2.13",
        "2.20.1-0ubuntu2.14",
        "2.20.1-0ubuntu2.15",
        "2.20.1-0ubuntu2.16",
        "2.20.1-0ubuntu2.17"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-6552",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.20.9-0ubuntu7.1"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.9-0ubuntu7.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.20.9-0ubuntu7.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.20.9-0ubuntu7.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.20.7-0ubuntu3",
        "2.20.7-0ubuntu3.1",
        "2.20.7-0ubuntu4",
        "2.20.8-0ubuntu1",
        "2.20.8-0ubuntu2",
        "2.20.8-0ubuntu3",
        "2.20.8-0ubuntu4",
        "2.20.8-0ubuntu5",
        "2.20.8-0ubuntu6",
        "2.20.8-0ubuntu7",
        "2.20.8-0ubuntu8",
        "2.20.8-0ubuntu9",
        "2.20.8-0ubuntu10",
        "2.20.9-0ubuntu1",
        "2.20.9-0ubuntu2",
        "2.20.9-0ubuntu4",
        "2.20.9-0ubuntu5",
        "2.20.9-0ubuntu6",
        "2.20.9-0ubuntu7"
      ]
    }
  ],
  "aliases": [],
  "details": "Sander Bos discovered that Apport incorrectly handled core dumps when\ncertain files are missing from /proc. A local attacker could possibly use\nthis issue to cause a denial of service, gain root privileges, or escape\nfrom containers.\n",
  "id": "USN-3664-1",
  "modified": "2026-02-10T04:41:21Z",
  "published": "2018-05-30T17:13:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-6552"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "apport vulnerability",
  "upstream": [
    "UBUNTU-CVE-2018-6552"
  ]
}

usn-3664-2

Vulnerability from osv_ubuntu

Published

2018-06-04 16:39

Modified

2026-02-10 04:41

Summary

apport vulnerability

Details

USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu 14.04 LTS was also vulnerable to this issue, but was incorrectly omitted from the previous updates. This update provides the corresponding update for Ubuntu 14.04 LTS.

Original advisory details:

References

URL

Type

	https://ubuntu.com/security/notices/USN-3664-2	ADVISORY
	https://ubuntu.com/security/CVE-2018-6552	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-6552",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-gtk",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-kde",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-noui",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-retrace",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "apport-valgrind",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "dh-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-apport",
            "binary_version": "2.14.1-0ubuntu3.29"
          },
          {
            "binary_name": "python3-problem-report",
            "binary_version": "2.14.1-0ubuntu3.29"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "apport",
        "purl": "pkg:deb/ubuntu/apport@2.14.1-0ubuntu3.29?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.14.1-0ubuntu3.29"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.12.5-0ubuntu2",
        "2.12.6-0ubuntu1",
        "2.12.7-0ubuntu1",
        "2.12.7-0ubuntu2",
        "2.12.7-0ubuntu3",
        "2.12.7-0ubuntu6",
        "2.13.1-0ubuntu1",
        "2.13.1-0ubuntu2",
        "2.13.2-0ubuntu2",
        "2.13.2-0ubuntu3",
        "2.13.2-0ubuntu4",
        "2.13.2-0ubuntu5",
        "2.13.3-0ubuntu1",
        "2.14-0ubuntu1",
        "2.14.1-0ubuntu1",
        "2.14.1-0ubuntu2",
        "2.14.1-0ubuntu3",
        "2.14.1-0ubuntu3.1",
        "2.14.1-0ubuntu3.2",
        "2.14.1-0ubuntu3.3",
        "2.14.1-0ubuntu3.4",
        "2.14.1-0ubuntu3.5",
        "2.14.1-0ubuntu3.6",
        "2.14.1-0ubuntu3.7",
        "2.14.1-0ubuntu3.8",
        "2.14.1-0ubuntu3.9",
        "2.14.1-0ubuntu3.10",
        "2.14.1-0ubuntu3.11",
        "2.14.1-0ubuntu3.12",
        "2.14.1-0ubuntu3.13",
        "2.14.1-0ubuntu3.15",
        "2.14.1-0ubuntu3.16",
        "2.14.1-0ubuntu3.18",
        "2.14.1-0ubuntu3.19",
        "2.14.1-0ubuntu3.20",
        "2.14.1-0ubuntu3.21",
        "2.14.1-0ubuntu3.23",
        "2.14.1-0ubuntu3.24",
        "2.14.1-0ubuntu3.25",
        "2.14.1-0ubuntu3.27",
        "2.14.1-0ubuntu3.28"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu\n14.04 LTS was also vulnerable to this issue, but was incorrectly omitted\nfrom the previous updates. This update provides the corresponding update\nfor Ubuntu 14.04 LTS.\n\nOriginal advisory details:\n\n Sander Bos discovered that Apport incorrectly handled core dumps when\n certain files are missing from /proc. A local attacker could possibly use\n this issue to cause a denial of service, gain root privileges, or escape\n from containers.\n",
  "id": "USN-3664-2",
  "modified": "2026-02-10T04:41:21Z",
  "published": "2018-06-04T16:39:21Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3664-2"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-6552"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "apport vulnerability",
  "upstream": [
    "UBUNTU-CVE-2018-6552"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2018-6552

Vulnerability from osv_ubuntu

CVE-2018-6552 (GCVE-0-2018-6552)

usn-3664-1

Vulnerability from osv_ubuntu

usn-3664-2

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature