CVE-2016-9950

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Dec 17, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-99516.5An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdCVE-2016-99528.1The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS baCVE-2016-99539.8The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS baCVE-2016-99547.5The backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6 for Scheme allows remote attackers to cause aCVE-2016-99556.3The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 reCVE-2016-99567.5The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.CVE-2016-99577.8Stack-based buffer overflow in game-music-emu before 0.6.1.CVE-2016-99587.8game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.CVE-2016-99597.8game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.CVE-2016-99605.5game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).CVE-2016-99619.8game-music-emu before 0.6.1 mishandles unspecified integer values.CVE-2016-99626.4RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of
CVE-2016-9950: High severity, CVSS 7.8 | Vulnix