CVE-2016-9950: apport_project apport Path Traversal

Vulnerability summary

CVE-2016-9950 is a high (CVSS 9.3) Path Traversal vulnerability in apport_project apport. EPSS estimates a 6.55% chance of exploitation in the next 30 days, higher than 93.7% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 17-12-2016
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.

• CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.