CVE-2019-7307 — HIGH (7.0) — White Hats Nepal

Vulnerability Description

Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Apport Project	Apport	2.14.1
Canonical	Ubuntu Linux	14.04

Related Weaknesses (CWE)

CWE-367

References

http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-O
https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1830858ExploitIssue TrackingVendor Advisory
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-7307.htmlVendor Advisory
http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-O
https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1830858ExploitIssue TrackingVendor Advisory
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-7307.htmlVendor Advisory

FAQ

What is CVE-2019-7307?

CVE-2019-7307 is a vulnerability with a CVSS score of 7.0 (HIGH). Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.x...

How severe is CVE-2019-7307?

CVE-2019-7307 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-7307?

Check the references section above for vendor advisories and patch information. Affected products include: Apport Project Apport, Canonical Ubuntu Linux.