cve/2015/CVE-2015-1318.md

CVE-2015-1318

Description

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

POC

Reference

• https://www.exploit-db.com/exploits/36782/
• https://www.exploit-db.com/exploits/43971/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ScottyBauer/CVE-2015-1318
• https://github.com/uoanlab/vultest