Apport Project

24 CVEs across 1 Apport Project products. Browse Apport Project vulnerabilities, severities, and proof-of-concept exploits.

Apport Project products with known CVEs

ProductCVEs
Apport24
Apport Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-28658Medium5.52024-06-04Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
CVE-2022-28657High7.82024-06-04Apport does not disable python crash handler before entering chroot
CVE-2022-28656Medium5.52024-06-04is_closing_session() allows users to consume RAM in the Apport process
CVE-2022-28655High7.12024-06-04is_closing_session() allows users to create arbitrary tcp dbus connections
CVE-2022-28654Medium5.52024-06-04is_closing_session() allows users to fill up apport.log
CVE-2022-28652Medium5.52024-06-04~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
CVE-2019-15790Low2.82020-04-28Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs t…
CVE-2020-8833Medium5.62020-04-22Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs…
CVE-2020-8831Medium6.52020-04-22Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this i…
CVE-2019-11485Low3.32020-02-08Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.
CVE-2019-11483High7.02020-02-08Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privil…
CVE-2019-11482Medium4.22020-02-08Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary direc…
CVE-2019-11481Low3.82020-02-08Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic link, a us…
CVE-2019-7307High7.02019-08-29Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability…
CVE-2018-6552High7.82018-05-31Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage…
CVE-2017-14180High7.82018-02-02Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an atta…
CVE-2017-14179High7.82018-02-02Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker cou…
CVE-2017-14177High7.82018-02-02Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could lev…
CVE-2017-10708High7.82017-07-18An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific h…
CVE-2016-9951Medium6.52016-12-17An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This…
CVE-2016-9950High7.82016-12-17An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields ar…
CVE-2016-9949High7.82016-12-17An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins wi…
CVE-2015-13382015-10-01kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2)…
CVE-2015-13182015-04-17The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a n…