CVE-2017-14180: Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local...

Security readout for executives and security teams

This is a local Apport flaw affecting versions 2.13 through 2.20.7. A user already on the system could abuse crash handling from a PID namespace to create certain files as root, potentially causing resource exhaustion or possibly gaining root privileges. Exposure is limited to systems running Apport 2.13 through 2.20.7 where an attacker has local user access. Ubuntu environments are directly relevant because Canonical published USN-3480-1 for this issue. Treat this as a patch-priority local privilege risk, especially on shared Linux systems. It is not presented as remotely exploitable, but possible root privilege gain raises business impact if attackers already have a foothold. Mitigation focus: Apply the relevant Ubuntu updates from USN-3480-1.; Check Canonical CVE guidance for fixed package versions.; Prioritize multi-user systems and hosts running untrusted local workloads..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.