NVD

Id
22536  
Name
CVE-2016-9951  
Description
An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the Relaunch button on Apport crash files generated by local systems. The Relaunch button will be hidden when crash files are opened directly in Apport-GTK.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-12-16  
Modified Date
2017-01-06  
Seq
2016-9951  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119422 22536 CVE-2016-9951 95011  View
119423 22536 CVE-2016-9951 USN-3157-1  View
119424 22536 CVE-2016-9951 https://bugs.launchpad.net/apport/+bug/1648806  View
119425 22536 CVE-2016-9951 https://donncha.is/2016/12/compromising-ubuntu-desktop/  View
119426 22536 CVE-2016-9951 https://github.com/DonnchaC/ubuntu-apport-exploitation  View
119427 22536 CVE-2016-9951 40937  View

Related JVN