Vulnerability · Published Apr 13, 2023 · Assigned by canonical
CVE-2023-1326local privilege escalation in apport-cli
High 7.7
In plain English
A high-severity privilege mismanagement in Apport from Canonical Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | apport | 2.20.11-0ubuntu82.4 | USN-6018-1 |
| Ubuntu:22.04:LTS | apport | 2.20.11-0ubuntu82.4 | UBUNTU-CVE-2023-1326 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd. | Apport | 0 – through 2.26.0 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H