Medium severity6.5NVD Advisory· Published Dec 17, 2016· Updated Jun 17, 2026
CVE-2016-9951
CVE-2016-9951
Description
An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in RespawnCommand or ProcCmdline fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the Relaunch button on Apport crash files generated by local systems. The Relaunch button will be hidden when crash files are opened directly in Apport-GTK.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*range: <=2.20.3
- (no CPE)range: <2.20.4
Patches
Vulnerability mechanics
References
5- bugs.launchpad.net/apport/+bug/1648806nvdIssue TrackingPatch
- donncha.is/2016/12/compromising-ubuntu-desktop/nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/95011nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-3157-1nvd
- www.exploit-db.com/exploits/40937/nvd
News mentions
0No linked articles in our index yet.