USN-3480-3
apport regression
USN-3480-2 fixed regressions in Apport. The update introduced a new regression in the container support. This update addresses the problem.
We apologize for the inconvenience.
Original advisory details:
Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local attacker could use this issue to perform a denial of service via resource exhaustion or possibly gain root privileges. (CVE-2017-14177)
Sander Bos discovered that Apport incorrectly handled core dumps for processes in a different PID namespace. A local attacker could use this issue to perform a denial of service via resource exhaustion or possibly gain root privileges. (CVE-2017-14180)
What each source reports
OSV No score
apport regression
USN-3480-2 fixed regressions in Apport. The update introduced a new regression in the container support. This update addresses the problem.
We apologize for the inconvenience.
Original advisory details:
Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local attacker could use this issue to perform a denial of service via resource exhaustion or possibly gain root privileges. (CVE-2017-14177)
Sander Bos discovered that Apport incorrectly handled core dumps for processes in a different PID namespace. A local attacker could use this issue to perform a denial of service via resource exhaustion or possibly gain root privileges. (CVE-2017-14180)
- Record
USN-3480-3- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apportUbuntu:16.04:LTS |
before 2.20.1-0ubuntu2.15, plus listed versions 2.19.1-0ubuntu32.19.2-0ubuntu12.19.2-0ubuntu22.19.2-0ubuntu32.19.2-0ubuntu4 Show 23 moreShow less2.19.2-0ubuntu52.19.2-0ubuntu62.19.2-0ubuntu82.19.2-0ubuntu92.19.3-0ubuntu12.19.3-0ubuntu22.19.3-0ubuntu32.19.4-0ubuntu12.19.4-0ubuntu22.20-0ubuntu22.20-0ubuntu32.20.1-0ubuntu12.20.1-0ubuntu22.20.1-0ubuntu2.12.20.1-0ubuntu2.22.20.1-0ubuntu2.42.20.1-0ubuntu2.52.20.1-0ubuntu2.62.20.1-0ubuntu2.92.20.1-0ubuntu2.102.20.1-0ubuntu2.122.20.1-0ubuntu2.132.20.1-0ubuntu2.14 |
2.20.1-0ubuntu2.15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3480-3 is a vulnerability with no CVSS score yet in apport, published January 3, 2018. No source lists public exploit code. Fixed in apport 2.20.1-0ubuntu2.15.