CVE-2019-7307

Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml

Medium6.5EPSS 0.33%

Published: 29 Aug 2019
Updated: 16 Sept 2024
Reserved: 1 Feb 2019
Assigned by: canonical

Description

Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system.

Scores

CVSS scores of CVE-2019-7307, by who scored it
Scored by	CVSS	Score	Vector
canonicalCNA (assigner)	3.0	Medium6.5	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
NVDNVD · Modified	3.1	High7.0	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.33% · top 74% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition (opens in a new tab)All about CWE-367 and its CVEs

Affected products

Ubuntu · apport
- affected before 2.14.1-0ubuntu3.29+esm1
- affected before 2.20.1-0ubuntu2.19
- affected before 2.20.9-0ubuntu7.7
- affected before 2.20.10-0ubuntu27.1
- affected before 2.20.11-0ubuntu5

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2019-7307](https://trackcve.app/badge/CVE-2019-7307.svg)](https://trackcve.app/cve/CVE-2019-7307)

Record last updated 16 Sept 2024, 23:56 UTC.