CVE-2017-14180 describes a local privilege escalation vulnerability affecting Apport versions 2.13 through 2.20.7, including those in Ubuntu Linux. The flaw allows a local attacker to create files as root by exploiting Apport's improper handling of crashes originating from a PID namespace. This could lead to a denial of service through resource exhaustion or potentially root access. Rated with a CVSS v3 score of 7.8 (High), the vulnerability has a low attack complexity and requires local user privileges, but can result in high impact to confidentiality, integrity, and availability. The EPSS score is very low, indicating a low probability of exploitation. Currently, there is no known active exploitation, nor are there public exploit modules available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.13, <= 2.20.7CPE matchmatch criteria | cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:* | ||
14.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | ||
16.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | ||
17.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:* | ||
17.10CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.