Vulnerability Details CVE-2017-14179
Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.2%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
Products affected by CVE-2017-14179
-
cpe:2.3:a:apport_project:apport:-
-
cpe:2.3:a:apport_project:apport:0.13
-
cpe:2.3:a:apport_project:apport:1.10
-
cpe:2.3:a:apport_project:apport:1.10.1
-
cpe:2.3:a:apport_project:apport:1.11
-
cpe:2.3:a:apport_project:apport:1.12
-
cpe:2.3:a:apport_project:apport:1.12.1
-
cpe:2.3:a:apport_project:apport:1.13.1
-
cpe:2.3:a:apport_project:apport:1.13.2
-
cpe:2.3:a:apport_project:apport:1.13.3
-
cpe:2.3:a:apport_project:apport:1.14
-
cpe:2.3:a:apport_project:apport:1.15
-
cpe:2.3:a:apport_project:apport:1.16
-
cpe:2.3:a:apport_project:apport:1.17
-
cpe:2.3:a:apport_project:apport:1.17.1
-
cpe:2.3:a:apport_project:apport:1.17.2
-
cpe:2.3:a:apport_project:apport:1.18
-
cpe:2.3:a:apport_project:apport:1.20.1
-
cpe:2.3:a:apport_project:apport:1.21
-
cpe:2.3:a:apport_project:apport:1.21.1
-
cpe:2.3:a:apport_project:apport:1.21.2
-
cpe:2.3:a:apport_project:apport:1.21.3
-
cpe:2.3:a:apport_project:apport:1.22
-
cpe:2.3:a:apport_project:apport:1.22.1
-
cpe:2.3:a:apport_project:apport:1.23
-
cpe:2.3:a:apport_project:apport:1.23.1
-
cpe:2.3:a:apport_project:apport:1.24
-
cpe:2.3:a:apport_project:apport:1.25
-
cpe:2.3:a:apport_project:apport:1.26
-
cpe:2.3:a:apport_project:apport:1.9.4
-
cpe:2.3:a:apport_project:apport:1.9.5
-
cpe:2.3:a:apport_project:apport:1.9.6
-
cpe:2.3:a:apport_project:apport:1.90
-
cpe:2.3:a:apport_project:apport:1.91
-
cpe:2.3:a:apport_project:apport:1.92
-
cpe:2.3:a:apport_project:apport:1.93
-
cpe:2.3:a:apport_project:apport:1.94
-
cpe:2.3:a:apport_project:apport:1.94.1
-
cpe:2.3:a:apport_project:apport:1.95
-
cpe:2.3:a:apport_project:apport:2.0
-
cpe:2.3:a:apport_project:apport:2.0.1
-
cpe:2.3:a:apport_project:apport:2.1
-
cpe:2.3:a:apport_project:apport:2.1.1
-
cpe:2.3:a:apport_project:apport:2.10
-
cpe:2.3:a:apport_project:apport:2.10.1
-
cpe:2.3:a:apport_project:apport:2.10.2
-
cpe:2.3:a:apport_project:apport:2.11
-
cpe:2.3:a:apport_project:apport:2.12
-
cpe:2.3:a:apport_project:apport:2.12.1
-
cpe:2.3:a:apport_project:apport:2.12.2
-
cpe:2.3:a:apport_project:apport:2.12.3
-
cpe:2.3:a:apport_project:apport:2.12.4
-
cpe:2.3:a:apport_project:apport:2.12.5
-
cpe:2.3:a:apport_project:apport:2.12.6
-
cpe:2.3:a:apport_project:apport:2.12.7
-
cpe:2.3:a:apport_project:apport:2.2
-
cpe:2.3:a:apport_project:apport:2.2.1
-
cpe:2.3:a:apport_project:apport:2.2.2
-
cpe:2.3:a:apport_project:apport:2.2.3
-
cpe:2.3:a:apport_project:apport:2.2.4
-
cpe:2.3:a:apport_project:apport:2.2.5
-
cpe:2.3:a:apport_project:apport:2.3
-
cpe:2.3:a:apport_project:apport:2.4
-
cpe:2.3:a:apport_project:apport:2.5
-
cpe:2.3:a:apport_project:apport:2.5.1
-
cpe:2.3:a:apport_project:apport:2.5.2
-
cpe:2.3:a:apport_project:apport:2.5.3
-
cpe:2.3:a:apport_project:apport:2.6
-
cpe:2.3:a:apport_project:apport:2.6.1
-
cpe:2.3:a:apport_project:apport:2.6.2
-
cpe:2.3:a:apport_project:apport:2.6.3
-
cpe:2.3:a:apport_project:apport:2.7
-
cpe:2.3:a:apport_project:apport:2.8
-
cpe:2.3:a:apport_project:apport:2.9
-
cpe:2.3:a:apport_project:apport:2.9.1
-
cpe:2.3:a:apport_project:apport:2.9.2
-
cpe:2.3:o:canonical:ubuntu_linux:14.04
-
cpe:2.3:o:canonical:ubuntu_linux:16.04
-
cpe:2.3:o:canonical:ubuntu_linux:17.04
-
cpe:2.3:o:canonical:ubuntu_linux:17.10
-
cpe:2.3:o:canonical:ubuntu_linux:18.04