High severity7.8NVD Advisory· Published Dec 17, 2016· Updated May 6, 2026
CVE-2016-9950
CVE-2016-9950
Description
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- bugs.launchpad.net/apport/+bug/1648806nvdIssue TrackingPatch
- donncha.is/2016/12/compromising-ubuntu-desktop/nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/95011nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-3157-1nvd
- www.exploit-db.com/exploits/40937/nvd
News mentions
0No linked articles in our index yet.