VULNERABILITY INTELLIGENCE
CVE-2013-1067
CVSS score4.9 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2013-10-25
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N
Description
Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.
Primary references
- security@ubuntu.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory