CVE-2018-6552
CVE-2018-6552 is a high-severity vulnerability in Apport Project Apport with a CVSS 3.x base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 3.x base score 7.8)
- CVSS v2: 7.2
- EPSS exploit prediction: 0% (31st percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Apport Project Apport
- Published:
- Last modified:
Description
Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.
Frequently asked questions
- What is CVE-2018-6552?
- Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.
- How severe is CVE-2018-6552?
- CVE-2018-6552 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2018-6552 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2018-6552?
- CVE-2018-6552 primarily affects Apport Project Apport. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2018-6552?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2018-6552 published?
- CVE-2018-6552 was published on 2018-05-31 and last updated on 2026-06-17.
References
Affected products (4)
- cpe:2.3:a:apport_project:apport:2.14.1:*:*:*:*:*:*:*
- cpe:2.3:a:apport_project:apport:2.20.9:*:*:*:*:*:*:*
- cpe:2.3:a:apport_project:apport:2.20.7:*:*:*:*:*:*:*
- cpe:2.3:a:apport_project:apport:2.20.1:*:*:*:*:*:*:*
More vulnerabilities in Apport Project Apport
- CVE-2022-28657 — High (CVSS 7.8): Apport does not disable python crash handler before entering chroot
- CVE-2017-14180 — High (CVSS 7.8): Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to…
- CVE-2017-14179 — High (CVSS 7.8): Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create…
- CVE-2017-14177 — High (CVSS 7.8): Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain…
- CVE-2017-10708 — High (CVSS 7.8): An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then…
- CVE-2016-9950 — High (CVSS 7.8): An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and…