Medium severity6.5NVD Advisory· Published Dec 17, 2016· Updated May 6, 2026
CVE-2016-9951
CVE-2016-9951
Description
An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in RespawnCommand or ProcCmdline fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the Relaunch button on Apport crash files generated by local systems. The Relaunch button will be hidden when crash files are opened directly in Apport-GTK.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- bugs.launchpad.net/apport/+bug/1648806nvdIssue TrackingPatch
- donncha.is/2016/12/compromising-ubuntu-desktop/nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/95011nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-3157-1nvd
- www.exploit-db.com/exploits/40937/nvd
News mentions
0No linked articles in our index yet.