High severity7.8NVD Advisory· Published Dec 17, 2016· Updated Jun 17, 2026
CVE-2016-9949
CVE-2016-9949
Description
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*range: <=2.20.3
- (no CPE)range: <2.20.4
Patches
Vulnerability mechanics
References
5- bugs.launchpad.net/apport/+bug/1648806nvdIssue TrackingPatch
- donncha.is/2016/12/compromising-ubuntu-desktop/nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/95011nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-3157-1nvd
- www.exploit-db.com/exploits/40937/nvd
News mentions
0No linked articles in our index yet.