apport vulnerabilities (Ubuntu)
62 vulnerabilities.
-
apportUbuntu apport regression No score -
apportUbuntu apport regression No score -
apportUbuntu apport regression No score -
apportUbuntu Race Condition in Canonical Apport 4.7 Medium -
apportUbuntu local privilege escalation in apport-cli 7.7 High -
apportUbuntu Users can consume unlimited disk space in /var/crash 7.5 High -
apportUbuntu Apport argument parsing mishandles filename splitting on older kernels resulting in argument... 5.5 Medium -
apportUbuntu Apport does not disable python crash handler before entering chroot 7.8 High -
apportUbuntu is_closing_session() allows users to consume RAM in the Apport process 5.5 Medium -
apportUbuntu is_closing_session() allows users to create arbitrary tcp dbus connections 7.1 High -
apportUbuntu is_closing_session() allows users to fill up apport.log 5.5 Medium -
apportUbuntu ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack 5.5 Medium -
apportUbuntu Apport can be tricked into connecting to arbitrary sockets as the root user 7.8 High -
apportUbuntu There is a race condition in the 'replaced executable' detection that, with the correct local... 7.8 High -
apportUbuntu apport vulnerability No score -
apportUbuntu apport vulnerability No score -
apportUbuntu Apport info disclosure via path traversal bug in read_file 6.5 Medium -
apportUbuntu Apport file permission bypass through emacs byte compilation errors 6.5 Medium -
apportUbuntu apport process_report() arbitrary file write 5.2 Medium -
apportUbuntu apport get_modified_conffiles() function command injection 3.8 Low -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport read_file() function could follow maliciously constructed symbolic links 7.3 High -
apportUbuntu apport can be stalled by reading a FIFO 8.8 High -
apportUbuntu apport improperly parses /proc/pid/stat 8.8 High -
apportUbuntu apport improperly parses /proc/pid/status 8.8 High -
apportUbuntu apport regression No score -
apportUbuntu TOCTOU in apport 7.0 High -
apportUbuntu gdbus setgid privilege escalation 3.1 Low -
apportUbuntu Unhandled exception in apport 5.5 Medium -
apportUbuntu Apport race condition in crash report permissions 5.6 Medium -
apportUbuntu World writable root owned lock file created in user controllable location 6.5 Medium -
apportUbuntu apport regression No score -
apportUbuntu apport regression No score -
apportUbuntu apport regression No score -
apportUbuntu Apport reads PID files with elevated privileges 2.8 Low -
apportUbuntu apport created lock file in wrong directory 3.3 Low -
apportUbuntu Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be... 7.0 High -
apportUbuntu Race condition between reading current working directory and writing a core dump 4.2 Medium -
apportUbuntu Apport reads arbitrary files if ~/.config/apport/settings is a symlink 3.8 Low -
apportUbuntu Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml 6.5 Medium -
apportUbuntu Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing 7.8 High -
apportUbuntu apport regression No score -
apportUbuntu apport regressions No score - Show olderLoading…