CVE-2015-2285: Ubuntu Upstart

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user/*/upstart/sessions/.

Affected products

• Ubuntu Upstart: up to and including 1.13.2-0ubuntu7
• Ubuntu Vivid: version 15.04 only

Published 2015-03-12. Last modified 2026-06-17.