NVD

Id
22534  
Name
CVE-2016-9949  
Description
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-12-16  
Modified Date
2017-01-06  
Seq
2016-9949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119410 22534 CVE-2016-9949 95011  View
119411 22534 CVE-2016-9949 USN-3157-1  View
119412 22534 CVE-2016-9949 https://bugs.launchpad.net/apport/+bug/1648806  View
119413 22534 CVE-2016-9949 https://donncha.is/2016/12/compromising-ubuntu-desktop/  View
119414 22534 CVE-2016-9949 https://github.com/DonnchaC/ubuntu-apport-exploitation  View
119415 22534 CVE-2016-9949 40937  View

Related JVN