High severity7.8NVD Advisory· Published Feb 2, 2018· Updated Jun 17, 2026
CVE-2017-14180
CVE-2017-14180
Description
Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability than CVE-2017-14179.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- na//Apportv5Range: 2.13 through 2.20.7
2.13 - 2.20.7+ 1 more
- (no CPE)range: 2.13 - 2.20.7
- cpe:2.3:a:apport_project:apport:*:*:*:*:*:*:*:*range: >=2.13,<=2.20.7
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 4 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Patches
Vulnerability mechanics
References
5- bazaar.launchpad.net/~apport-hackers/apport/trunk/revision/3171nvdIssue TrackingThird Party Advisory
- launchpad.net/bugs/1726372nvdIssue TrackingThird Party Advisory
- people.canonical.com/~ubuntu-security/cve/nvdThird Party Advisory
- usn.ubuntu.com/usn/usn-3480-1nvdThird Party Advisory
- seclists.org/fulldisclosure/2025/Jun/9nvd
News mentions
0No linked articles in our index yet.