{"api_version":"1","generated_at":"2026-07-23T09:39:41+00:00","cve":"CVE-2015-1318","urls":{"html":"https://cve.report/CVE-2015-1318","api":"https://cve.report/api/cve/CVE-2015-1318.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-1318","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-1318"},"summary":{"title":"CVE-2015-1318","description":"The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).","state":"PUBLISHED","assigner":"canonical","published_at":"2015-04-17 17:59:01","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"https://www.exploit-db.com/exploits/43971/","name":"https://www.exploit-db.com/exploits/43971/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apport/ABRT - 'chroot' Local Privilege Escalation (Metasploit) - Linux local Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2025/Jun/9","name":"http://seclists.org/fulldisclosure/2025/Jun/9","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/36782/","name":"https://www.exploit-db.com/exploits/36782/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Apport 2.14.1 (Ubuntu 14.04.2) - Local Privilege Escalation - Linux local Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2569-1","name":"http://www.ubuntu.com/usn/USN-2569-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-2569-1: Apport vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://launchpad.net/apport/trunk/2.17.1","name":"https://launchpad.net/apport/trunk/2.17.1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"2.17.1 : Series trunk : Apport","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758","name":"https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug #1438758 “User to root privilege escalation (ab)using the cr...” : Bugs : apport package : Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/120803","name":"http://www.osvdb.org/120803","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1318","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1318","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.13.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.13.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.13.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.14.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.15.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.16.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.16.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"1318","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apport_project","cpe5":"apport","cpe6":"2.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2025-11-03T19:25:15.372Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://launchpad.net/apport/trunk/2.17.1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758"},{"name":"120803","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/120803"},{"name":"36782","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/36782/"},{"name":"USN-2569-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2569-1"},{"name":"43971","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/43971/"},{"url":"http://seclists.org/fulldisclosure/2025/Jun/9"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-04-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-02-07T10:57:01.000Z","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://launchpad.net/apport/trunk/2.17.1"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758"},{"name":"120803","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/120803"},{"name":"36782","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/36782/"},{"name":"USN-2569-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2569-1"},{"name":"43971","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/43971/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@ubuntu.com","ID":"CVE-2015-1318","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://launchpad.net/apport/trunk/2.17.1","refsource":"CONFIRM","url":"https://launchpad.net/apport/trunk/2.17.1"},{"name":"https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758","refsource":"CONFIRM","url":"https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758"},{"name":"120803","refsource":"OSVDB","url":"http://www.osvdb.org/120803"},{"name":"36782","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/36782/"},{"name":"USN-2569-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-2569-1"},{"name":"43971","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/43971/"}]}}}},"cveMetadata":{"assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","assignerShortName":"canonical","cveId":"CVE-2015-1318","datePublished":"2015-04-17T17:00:00.000Z","dateReserved":"2015-01-22T00:00:00.000Z","dateUpdated":"2025-11-03T19:25:15.372Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2015-04-17 17:59:01","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.13:*:*:*:*:*:*:*","matchCriteriaId":"7C587160-F938-4C50-A576-9340C25C4C55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.13.1:*:*:*:*:*:*:*","matchCriteriaId":"620CA03F-1870-43C5-A461-74187F190234"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.13.2:*:*:*:*:*:*:*","matchCriteriaId":"744360E3-1C77-4903-A233-642C46BDB08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.13.3:*:*:*:*:*:*:*","matchCriteriaId":"8EB2B501-A32A-4A6D-AF0C-6BC371753466"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14:*:*:*:*:*:*:*","matchCriteriaId":"B3D1B30C-509A-4C50-B42E-D5A9CCB9D985"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"8CBC4B18-529F-4AAE-BCFE-6F8ACA5346B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1E166C-4173-41CC-9011-6154F9879934"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"DD4C9CE4-9950-4B16-B5E8-77CC271276AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"18DE4F32-1F3C-47ED-ACE2-399B5BEB3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"D811E6BA-6E1D-4E3A-8658-41DDC436F8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14.6:*:*:*:*:*:*:*","matchCriteriaId":"11AEDA35-3CCC-42AD-A7CD-2A02EAA8301E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.14.7:*:*:*:*:*:*:*","matchCriteriaId":"8319DD9F-0B18-43AA-A6E8-368CA9D56CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.15:*:*:*:*:*:*:*","matchCriteriaId":"A2CC60CF-F046-4EEA-94AC-B5678CEFCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.15.1:*:*:*:*:*:*:*","matchCriteriaId":"D3838106-FD5A-41D4-AC89-AFBE0BA8E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.16:*:*:*:*:*:*:*","matchCriteriaId":"C450F1A1-D6E0-4D50-806F-C84168E94CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"838FF491-4F6B-4E51-888E-5C62D647EC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"2098B517-F8A7-4675-B57F-57A8B790DFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apport_project:apport:2.17:*:*:*:*:*:*:*","matchCriteriaId":"0F9F8E6F-D879-4ADE-BBF1-A92C36DD9FCA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"1318","Ordinal":"1","Title":"CVE-2015-1318","CVE":"CVE-2015-1318","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"1318","Ordinal":"1","NoteData":"The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).","Type":"Description","Title":"CVE-2015-1318"},{"CveYear":"2015","CveId":"1318","Ordinal":"2","NoteData":"2015-04-17","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"1318","Ordinal":"3","NoteData":"2018-02-07","Type":"Other","Title":"Modified"}]}}}