Skip to content
Sign in
7.4 High

CVE-2015-1341 Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and…

Description

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

Affected products and versions

Product Affected versions Fixed in
Apport 2.19 earliest → < 2.19.2 2.19.1-0ubuntu4
Apport 2.17 earliest → < 2.17.2-0ubuntu1.7 2.17.2-0ubuntu1.7
Apport 2.14 earliest → < 2.14.1-0ubuntu3.18 2.14.1-0ubuntu3.18
Apport 2.0 earliest → < 2.0.1-0ubuntu17.13 2.0.1-0ubuntu17.13

Other CVEs of Apport

The 2 CVEs of Apport →
CVE-2019-7307 Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1,… 6.5 Medium
Track this CVE