CVE-2015-1338

kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk...

7.2 HighPublic exploitFix available

kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.

Exploit likelihood

0.91%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2015-1338
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-1338
Updated: 2026-11-02

EUVDEUVD-2015-1478 No score

Record: EUVD-2015-1478
Updated: 2026-11-03

GitHub AdvisoriesGHSA-77gx-3rjc-296q No score

kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk...

Record: GHSA-77gx-3rjc-296q
Weakness: CWE-59
Updated: 2026-11-02

OSVSUSE-SU-2017:1938-1 No score

Security update for apport

This update for apport fixes the following issues:

Security issue fixed:

CVE-2015-1338: Insecurely created crash dumps could lead to a DoS or privilege escalation through malicious symlinks. (bsc#947731)

Record: SUSE-SU-2017:1938-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-1338 No score

Record: UBUNTU-CVE-2015-1338
Updated: 2026-11-02

OSVUSN-2744-1 No score

apport vulnerability

Halfdog discovered that Apport incorrectly handled kernel crash dump files. A local attacker could use this issue to cause a denial of service, or possibly elevate privileges. The default symlink protections for affected releases should reduce the vulnerability to a denial of service.

Record: USN-2744-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`apport` SUSE:Linux Enterprise Server 11 SP4	before 0.114-12.8.3.1	0.114-12.8.3.1
`apport-crashdb-sle` SUSE:Linux Enterprise Server 11 SP4	before 0.114-0.8.3.1	0.114-0.8.3.1
`apport` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	before 0.114-12.8.3.1	0.114-12.8.3.1
`apport-crashdb-sle` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	before 0.114-0.8.3.1	0.114-0.8.3.1
`apport` Ubuntu:14.04:LTS	before 2.14.1-0ubuntu3.15, plus listed versions 2.12.5-0ubuntu22.12.6-0ubuntu12.12.7-0ubuntu12.12.7-0ubuntu22.12.7-0ubuntu3 Show 25 moreShow less 2.12.7-0ubuntu62.13.1-0ubuntu12.13.1-0ubuntu22.13.2-0ubuntu22.13.2-0ubuntu32.13.2-0ubuntu42.13.2-0ubuntu52.13.3-0ubuntu12.14-0ubuntu12.14.1-0ubuntu12.14.1-0ubuntu22.14.1-0ubuntu32.14.1-0ubuntu3.12.14.1-0ubuntu3.22.14.1-0ubuntu3.32.14.1-0ubuntu3.42.14.1-0ubuntu3.52.14.1-0ubuntu3.62.14.1-0ubuntu3.72.14.1-0ubuntu3.82.14.1-0ubuntu3.92.14.1-0ubuntu3.102.14.1-0ubuntu3.112.14.1-0ubuntu3.122.14.1-0ubuntu3.13	2.14.1-0ubuntu3.15

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apport 2.19 (Ubuntu 15.04) - Local Privilege Escalation	2015-09-29

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1338 is a high vulnerability (CVSS 7.2) in Apport Project Apport, published September 24, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.91%, the 60th percentile. Fixed in apport 0.114-12.8.3.1.

References

Show 9 moreShow less