NVD

Id
23687  
Name
CVE-2015-1338  
Description
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-10-01  
Modified Date
2015-10-02  
Seq
2015-1338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
125962 23687 CVE-2015-1338 http://packetstormsecurity.com/files/133723/Ubuntu-Apport-kernel_crashdump-Symlink.html  View
125963 23687 CVE-2015-1338 20150927 Apport kernel_crashdump symlink vulnerability exploitation  View
125964 23687 CVE-2015-1338 http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/  View
125965 23687 CVE-2015-1338 USN-2744-1  View
125966 23687 CVE-2015-1338 https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1492570  View
125967 23687 CVE-2015-1338 https://launchpad.net/apport/trunk/2.19  View
125968 23687 CVE-2015-1338 38353  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9727 JVNDB-2015-005047 Apport の kernel_crashdump におけるサービス運用妨害 (DoS) の脆弱性 Apport の kernel_crashdump には、サービス運用妨害 (ディスクの消費) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2015-1338 78563 CVE-2015-1338 23687 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005047.html 2015-09-24 2015-10-05 View