kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1338
Reference (s):
- https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1492570
- https://launchpad.net/apport/trunk/2.19
- EXPLOIT-DB:38353
- URL: https://www.exploit-db.com/exploits/38353/
- FULLDISC:20150927 Apport kernel_crashdump symlink vulnerability exploitation