USN-2569-2
apport vulnerability
USN-2569-1 fixed a vulnerability in Apport. Tavis Ormandy discovered that the fixed packages were still vulnerable to a privilege escalation attack. This update completely disables crash report handling for containers until a more complete solution is available.
Original advisory details:
Stéphane Graber and Tavis Ormandy independently discovered that Apport incorrectly handled the crash reporting feature. A local attacker could use this issue to gain elevated privileges.
What each source reports
OSV No score
apport vulnerability
USN-2569-1 fixed a vulnerability in Apport. Tavis Ormandy discovered that the fixed packages were still vulnerable to a privilege escalation attack. This update completely disables crash report handling for containers until a more complete solution is available.
Original advisory details:
Stéphane Graber and Tavis Ormandy independently discovered that Apport incorrectly handled the crash reporting feature. A local attacker could use this issue to gain elevated privileges.
- Record
USN-2569-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apportUbuntu:14.04:LTS |
before 2.14.1-0ubuntu3.10, plus listed versions 2.12.5-0ubuntu22.12.6-0ubuntu12.12.7-0ubuntu12.12.7-0ubuntu22.12.7-0ubuntu3 Show 21 moreShow less2.12.7-0ubuntu62.13.1-0ubuntu12.13.1-0ubuntu22.13.2-0ubuntu22.13.2-0ubuntu32.13.2-0ubuntu42.13.2-0ubuntu52.13.3-0ubuntu12.14-0ubuntu12.14.1-0ubuntu12.14.1-0ubuntu22.14.1-0ubuntu32.14.1-0ubuntu3.12.14.1-0ubuntu3.22.14.1-0ubuntu3.32.14.1-0ubuntu3.42.14.1-0ubuntu3.52.14.1-0ubuntu3.62.14.1-0ubuntu3.72.14.1-0ubuntu3.82.14.1-0ubuntu3.9 |
2.14.1-0ubuntu3.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2569-2 is a vulnerability with no CVSS score yet in apport, published April 16, 2015. No source lists public exploit code. Fixed in apport 2.14.1-0ubuntu3.10.