local privilege escalation in apport-cli

CVE-2023-1326

Summary

A vulnerability has been identified in apport-cli versions 2.26.0 and earlier, which may allow a local attacker to escalate privileges under specific conditions. If a system is misconfigured to allow unprivileged users to execute sudo with apport-cli as the command, and if appropriate settings for the pager and terminal size are altered, this could lead to unauthorized privilege escalation. Such configurations are deemed highly unlikely, making the exposure limited. However, it highlights the importance of maintaining strict user permissions and regular audits to prevent potential exploit attempts.

References