Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-1326
HistoryApr 13, 2023 - 11:15 p.m.

Privilege escalation

2023-04-1323:15:00
PRIOn knowledge base
www.prio-n.com
18
privilege escalation
apport-cli
cve-2023-26604
unprivileged users
sudo
local attacker

7.7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.