cvelist/2017/14xxx/CVE-2017-14177.json

{
   "CVE_data_meta": {
      "ASSIGNER": "security@ubuntu.com",
      "DATE_PUBLIC": "2017-11-15T19:00:00.000Z",
      "ID": "CVE-2017-14177",
      "STATE": "PUBLIC"
   },
   "affects": {
      "vendor": {
         "vendor_data": [
            {
               "product": {
                  "product_data": [
                     {
                        "product_name": "Apport",
                        "version": {
                           "version_data": [
                              {
                                 "version_value": "through 2.20.7"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name": "n/a"
            }
         ]
      }
   },
   "credit": [
      "Sander Bos"
   ],
   "data_format": "MITRE",
   "data_type": "CVE",
   "data_version": "4.0",
   "description": {
      "description_data": [
         {
            "lang": "eng",
            "value": "Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324."
         }
      ]
   },
   "problemtype": {
      "problemtype_data": [
         {
            "description": [
               {
                  "lang": "eng",
                  "value": "Denial of service via resource exhaustion and privilege escalation"
               }
            ]
         }
      ]
   },
   "references": {
      "reference_data": [
         {
            "url": "https://people.canonical.com/~ubuntu-security/cve/?cve=CVE-2017-14177"
         },
         {
            "url": "https://launchpad.net/bugs/1726372"
         },
         {
            "url": "https://bazaar.launchpad.net/~apport-hackers/apport/trunk/revision/3171"
         },
         {
            "url": "https://usn.ubuntu.com/usn/usn-3480-1"
         }
      ]
   }
}