Description gdbus setgid privilege escalation
A privilege escalation vulnerability has been identified in the Apport package of Ubuntu. This issue arises because Apport, the crash reporting tool, executes gdbus to check if a process ID is in a closing user session. While it correctly drops user privileges, it fails to drop group privileges, allowing unauthorized access to certain files owned by the root group. The vulnerability can be exploited by creating a file readable only by the root group, precisely 16 bytes in size, and using gdbus to access it.
Users can upgrade to Apport versions 2.20.11-0ubuntu27.6 (Focal), 2.20.9-0ubuntu7.16 (Bionic), or 2.20.11-0ubuntu44 (Groovy) to address this vulnerability. For Ubuntu Xenial, the patched version is 2.20.11-0ubuntu27.6.
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 7, 2025 Exploitation: PocAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions canonical apport 2.20.1-0ubuntu1
2.20.1-0ubuntu2
2.20.1-0ubuntu2.1
2.20.1-0ubuntu2.2
2.20.1-0ubuntu2.4
2.20.1-0ubuntu2.5
2.20.1-0ubuntu2.6
2.20.1-0ubuntu2.7
2.20.1-0ubuntu2.8
2.20.1-0ubuntu2.9
2.20.1-0ubuntu2.10
2.20.1-0ubuntu2.12
2.20.1-0ubuntu2.13
2.20.1-0ubuntu2.14
2.20.1-0ubuntu2.15
2.20.1-0ubuntu2.16
2.20.1-0ubuntu2.17
2.20.1-0ubuntu2.18
2.20.1-0ubuntu2.19
2.20.1-0ubuntu2.20
2.20.1-0ubuntu2.21
2.20.1-0ubuntu2.22
2.20.1-0ubuntu2.23
2.20.9-0ubuntu1
2.20.9-0ubuntu2
2.20.9-0ubuntu3
2.20.9-0ubuntu4
2.20.9-0ubuntu5
2.20.9-0ubuntu6
2.20.9-0ubuntu7
2.20.9-0ubuntu7.1
2.20.9-0ubuntu7.2
2.20.9-0ubuntu7.3
2.20.9-0ubuntu7.4
2.20.9-0ubuntu7.5
2.20.9-0ubuntu7.6
2.20.9-0ubuntu7.7
2.20.9-0ubuntu7.8
2.20.9-0ubuntu7.9
2.20.9-0ubuntu7.10
2.20.9-0ubuntu7.11
2.20.9-0ubuntu7.12
2.20.9-0ubuntu7.13
2.20.9-0ubuntu7.14
2.20.9-0ubuntu7.15
2.20.11-0ubuntu8
2.20.11-0ubuntu9
2.20.11-0ubuntu10
2.20.11-0ubuntu11
2.20.11-0ubuntu12
2.20.11-0ubuntu13
2.20.11-0ubuntu14
2.20.11-0ubuntu15
2.20.11-0ubuntu16
2.20.11-0ubuntu17
2.20.11-0ubuntu18
2.20.11-0ubuntu19
2.20.11-0ubuntu20
2.20.11-0ubuntu21
2.20.11-0ubuntu22
2.20.11-0ubuntu23
2.20.11-0ubuntu24
2.20.11-0ubuntu25
2.20.11-0ubuntu26
2.20.11-0ubuntu27
2.20.11-0ubuntu27.2
2.20.11-0ubuntu27.3
2.20.11-0ubuntu27.4
2.20.11-0ubuntu27.5
2.20.11-0ubuntu27.7
2.20.11-0ubuntu27.8
2.20.11-0ubuntu27.9
2.20.11-0ubuntu27.10
2.20.11-0ubuntu27.11
2.20.11-0ubuntu27.12
2.20.11-0ubuntu27.13
2.20.11-0ubuntu27.14
2.20.11-0ubuntu27.16
2.20.11-0ubuntu27.17
2.20.11-0ubuntu27.18
2.20.11-0ubuntu27.19
2.20.11-0ubuntu27.20
2.20.11-0ubuntu28
2.20.11-0ubuntu29
2.20.11-0ubuntu30
2.20.11-0ubuntu31
2.20.11-0ubuntu32
2.20.11-0ubuntu33
2.20.11-0ubuntu34
2.20.11-0ubuntu35
2.20.11-0ubuntu36
2.20.11-0ubuntu37
2.20.11-0ubuntu38
2.20.11-0ubuntu39
2.20.11-0ubuntu40
2.20.11-0ubuntu41
2.20.11-0ubuntu42
2.20.11-0ubuntu43
Viewing 5 of 98 versions. View all CPE cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.7:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.8:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.9:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.10:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.11:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.12:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.13:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.14:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.16:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.17:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.18:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.19:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.20:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu28:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu29:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu30:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu31:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu32:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu33:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu34:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu35:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu36:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu37:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu38:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu39:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu40:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu41:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu42:*:*:*:*:*:*:* cpe:2.3:a:canonical:apport:2.20.11-0ubuntu43:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 4 change records found show changes