Main Vulnerability Database Vulnerabilities #VU22532

Resource management error in apport (Ubuntu package) - CVE-2019-11485

Published: November 5, 2019

Vulnerability identifier: #VU22532

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2019-11485

CWE-ID: CWE-399

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Canonical Ltd.

Affected software:
apport (Ubuntu package)

Detailed vulnerability description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to Apport mishandled lock-file creation. A local user can crash the Apport service.

Update the affected packages.

Ubuntu 19.10: apport - 2.20.11-0ubuntu8.2; python-apport - 2.20.11-0ubuntu8.2; python3-apport - 2.20.11-0ubuntu8.2
Ubuntu 19.04: apport - 2.20.10-0ubuntu27.3; python-apport - 2.20.10-0ubuntu27.3; python3-apport - 2.20.10-0ubuntu27.3
Ubuntu 18.04 LTS: apport - 2.20.9-0ubuntu7.9; python-apport - 2.20.9-0ubuntu7.9; python3-apport - 2.20.9-0ubuntu7.9
Ubuntu 16.04 LTS: apport - 2.20.1-0ubuntu2.21; python-apport - 2.20.1-0ubuntu2.21; python3-apport - 2.20.1-0ubuntu2.21