Description (CNA)
Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Apport | affected before 2.13 |
CWE
No CWE identifiers supplied.
References
- https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14179
- https://launchpad.net/bugs/1726372
ADP enrichment
No English description supplied.