{
  "cveId": "CVE-2018-6552",
  "url": "https://patchblox.com/security/cve/CVE-2018-6552",
  "summary": "CVE-2018-6552 is fixed in 11 products on 1 platform, first by apport 2.20.9-0ubuntu7.1, released May 30, 2018. It is not reported as exploited. Patch Radar priority: High.",
  "title": "apport: Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files...",
  "description": "Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/\u0026lt;global pid\u0026gt;/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/\u0026lt;global pid\u0026gt;/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.",
  "published": "2018-05-30T11:00:00Z",
  "severity": "High",
  "epss": 0.00389,
  "epssPercentile": 0.33201,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "apport",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "apport 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-apport-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "apport-gtk",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "apport-gtk 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-apport-gtk-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "apport-kde",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "apport-kde 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-apport-kde-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "apport-noui",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "apport-noui 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-apport-noui-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "apport-retrace",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "apport-retrace 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-apport-retrace-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "apport-valgrind",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "apport-valgrind 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-apport-valgrind-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dh-apport",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "dh-apport 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-dh-apport-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-apport",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "python-apport 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-apport-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-problem-report",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "python-problem-report 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-problem-report-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-apport",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "python3-apport 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-apport-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-problem-report",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.20.9-0ubuntu7.1",
      "fix": "python3-problem-report 2.20.9-0ubuntu7.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-problem-report-2.20.9-0ubuntu7.1",
      "released": "2018-05-30T11:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}