Threats tagged 'ghsa-8gm9-ffj3-h633'

A privilege escalation vulnerability in apport before version 2.37.0 allows an unprivileged local attacker to gain root privileges on systems with automatic crash reporting enabled. The vulnerability arises because the crash report processing pipeline runs as root and executes ldd on an attacker-controlled ExecutablePath field in a crash file placed in the world-writable /var/crash directory. This causes the dynamic loader to load and execute an attacker-supplied audit module, enabling arbitrary code execution with root privileges.