CVE-2015-1324

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-25 · updated 2026-06-17
Weakness: CWE-264

Description

Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges by leveraging incorrect handling of permissions when generating core dumps for setuid binaries.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 14.10, 15.04

References

http://www.securityfocus.com/bid/74767
http://www.ubuntu.com/usn/USN-2609-1
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239
http://www.securityfocus.com/bid/74767
http://www.ubuntu.com/usn/USN-2609-1
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239

Get alerted when CVE-2015-1324 or the next vulnerability affects your stack