Description
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://launchpad.net/apport/trunk/2.19.2
Third Party Advisory x_refsource_misc
https://usn.ubuntu.com/2782-1/
Scores
CVSS v3
7.4
EPSS
0.0043
EPSS Percentile
34.8%
Attack Vector
PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-264
Status
published
Products (5)
canonical/apport
< 2.19.2
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
15.04
canonical/ubuntu_linux
15.10
Published
Apr 22, 2019
Tracked Since
Feb 18, 2026