7.2

CVE-2015-1318: apport_project apport

CVSS: 7.2v2.0HighModified
AliasesUBUNTU-CVE-2015-1318USN-2569-1
Published 17-04-2015Last modified 03-11-2025
Open JSON

Vulnerability summary

CVE-2015-1318 is a high (CVSS 7.2) vulnerability in apport_project apport. EPSS estimates a 4.19% chance of exploitation in the next 30 days, higher than 90.8% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk
40/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.2/10
010
High · v2.0 (NVD)
EPSS score
4.19%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits4exploit-database, metasploit

Timeline

  1. 17-04-2015
    PublishedVulnerability first disclosed.
  2. 03-11-2025
    Last modifiedVulnerability information updated.

Description

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

4.19%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.19% on 18-09-2026

18-09-202618-10-2026
EPSS score
4.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found
  • exploit-databaselocallinuxUnverified

    Apport 2.14.1 (Ubuntu 14.04.2) - Local Privilege Escalation

    Maturity: poc

  • exploit-databaselocallinuxVerified

    Apport/Abrt (Ubuntu / Fedora) - Local Privilege Escalation

    Maturity: weaponized

  • exploit-databaselocallinuxVerified

    Apport/ABRT - 'chroot' Local Privilege Escalation (Metasploit)

    Maturity: weaponized

Show all 4 exploits
  • MetasploitMetasploitremoteVerified

    Apport / ABRT chroot Privilege Escalation

    exploit/linux/local/apport_abrt_chroot_priv_esc

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Apport_project1 product
  • apport2.13 | 2.13.1 | 2.13.2 | 2.13.3 | 2.14 | 2.14.1 | 2.14.2 | 2.14.3 | 2.14.4 | 2.14.5 | 2.14.6 | 2.14.7 | 2.15 | 2.15.1 | 2.16 | 2.16.1 | 2.16.2 | 2.17
Ubuntu1 product
  • apport< 2.14.1-0ubuntu3.9

2 vendors · 2 products

References

10 links