description: Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1324.
problem types: Denial of service via resource exhaustion and privilege escalation
affected:
{
product: Apport
vendor: n/a
versions:
status: affected, version: through 2.20.7
}