CVE-2015-2285: The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as u...

Security readout for executives and security teams

CVE-2015-2285 is a local privilege escalation issue in Ubuntu's Upstart logrotation script. A user who already has local access could use a crafted file in an Upstart session path to run commands with higher privileges. It is not remotely exploitable from the sources provided. Likely exposure is limited to Ubuntu Vivid 15.04 systems running the affected Upstart package before 1.13.2-0ubuntu9. Local user access is required. The provided sources do not identify other affected Ubuntu releases, downstream products, or cloud images. Prioritize if legacy Ubuntu Vivid systems still exist or if multi-user shell access is allowed. Business urgency is lower for modern supported Ubuntu fleets, but any confirmed affected host should be remediated because the impact is privilege gain. Mitigation focus: Upgrade Upstart to 1.13.2-0ubuntu9 or later where applicable.; Check Ubuntu or Launchpad guidance for distro-specific remediation.; Retire or isolate unsupported Ubuntu Vivid systems..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.