CVE-2017-10708

概要

参考情報

• launchpad.net/bugs/1700573 · Third Party Advisory
• launchpad.net/ubuntu/+source/apport/+changelog · Third Party Advisory

apport のその他の脆弱性

• CVE-2022-28658中 5.5Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
• CVE-2022-28657高 7.8Apport does not disable python crash handler before entering chroot
• CVE-2022-28656中 5.5is_closing_session() allows users to consume RAM in the Apport process
• CVE-2022-28655高 7.1is_closing_session() allows users to create arbitrary tcp dbus connections
• CVE-2022-28654中 5.5is_closing_session() allows users to fill up apport.log