What’s Vulnerable › Vulnerabilities

CVE-2016-9949

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2016-12-17 · updated 2026-06-17
• Weakness: CWE-94

Description

An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.

Affected products

• Apport: through 2.20.3
• Canonical Ubuntu Linux: through 12.10

References

• http://www.securityfocus.com/bid/95011
• http://www.ubuntu.com/usn/USN-3157-1
• https://bugs.launchpad.net/apport/+bug/1648806
• https://donncha.is/2016/12/compromising-ubuntu-desktop/
• https://github.com/DonnchaC/ubuntu-apport-exploitation
• https://www.exploit-db.com/exploits/40937/
• http://www.securityfocus.com/bid/95011
• http://www.ubuntu.com/usn/USN-3157-1
• https://bugs.launchpad.net/apport/+bug/1648806
• https://donncha.is/2016/12/compromising-ubuntu-desktop/
• https://github.com/DonnchaC/ubuntu-apport-exploitation
• https://www.exploit-db.com/exploits/40937/

Get alerted when CVE-2016-9949 or the next vulnerability affects your stack