Unrated severityNVD Advisory· Published Oct 1, 2015· Updated May 6, 2026
CVE-2015-1338
CVE-2015-1338
Description
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
Affected products
4cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- launchpad.net/apport/trunk/2.19nvdPatch
- packetstormsecurity.com/files/133723/Ubuntu-Apport-kernel_crashdump-Symlink.htmlnvdExploit
- www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/nvdExploit
- www.exploit-db.com/exploits/38353/nvdExploit
- seclists.org/fulldisclosure/2015/Sep/101nvd
- www.ubuntu.com/usn/USN-2744-1nvd
- bugs.launchpad.net/ubuntu/+source/apport/+bug/1492570nvd
News mentions
0No linked articles in our index yet.