High severity7.8NVD Advisory· Published Dec 17, 2016· Updated Jun 17, 2026
CVE-2016-9950
CVE-2016-9950
Description
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*range: <=2.20.3
- (no CPE)range: <2.20.4
Patches
Vulnerability mechanics
References
5- bugs.launchpad.net/apport/+bug/1648806nvdIssue TrackingPatch
- donncha.is/2016/12/compromising-ubuntu-desktop/nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/95011nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-3157-1nvd
- www.exploit-db.com/exploits/40937/nvd
News mentions
0No linked articles in our index yet.