CVE-2019-11481

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic link, a user could get apport to read any file on the system as root, with unknown consequences.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
Canonical	apport	>= 2.14.1, < 2.14.1-0ubuntu3.29+esm2; >= 2.20.1, < 2.20.1-0ubuntu2.20; >= 2.20.9, < 2.20.9-0ubuntu7.8; >= 2.20.11, < 2.20.11-0ubuntu8.1

References

http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
https://usn.ubuntu.com/usn/usn-4171-1Third Party Advisory
https://usn.ubuntu.com/usn/usn-4171-2Third Party Advisory
http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
https://usn.ubuntu.com/usn/usn-4171-1Third Party Advisory
https://usn.ubuntu.com/usn/usn-4171-2Third Party Advisory

Timeline

Published: Feb 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-114824.7Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written CVE-2019-114833.3Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash CVE-2019-114847.8Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.CVE-2019-114853.3Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.CVE-2019-114867.0The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.CVE-2019-114877.8The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of R CVE-2019-114888.1Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attac CVE-2019-114898.8Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-P CVE-2019-11498.8A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker CVE-2019-114907.8An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap CVE-2019-114927.5ProjectSend before r1070 writes user passwords to the server logs.CVE-2019-114937.8VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx (used by pdfeditor.exe and pdf