Apport Project Apport vulnerabilities

• apport project apport, canonical ubuntu linux +1 more Apport argument parsing mishandles filename splitting on older kernels resulting in argument... CVE-2022-28658 Fix available 5.5 MediumMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more Apport does not disable python crash handler before entering chroot CVE-2022-28657 Fix available 7.8 HighMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more is_closing_session() allows users to consume RAM in the Apport process CVE-2022-28656 Fix available 5.5 MediumMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more is_closing_session() allows users to create arbitrary tcp dbus connections CVE-2022-28655 Fix available 7.1 HighMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more is_closing_session() allows users to fill up apport.log CVE-2022-28654 Fix available 5.5 MediumMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack CVE-2022-28652 Fix available 5.5 MediumMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more Apport race condition in crash report permissions CVE-2020-8833 Fix available 5.6 MediumApril 2, 2020
• apport project apport, canonical ubuntu linux +1 more World writable root owned lock file created in user controllable location CVE-2020-8831 Fix available 6.5 MediumApril 2, 2020
• apport project apport, canonical ubuntu linux +1 more Apport reads PID files with elevated privileges CVE-2019-15790 Fix available 2.8 LowOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more apport created lock file in wrong directory CVE-2019-11485 Fix available 3.3 LowOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be... CVE-2019-11483 Fix available 7.0 HighOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more Race condition between reading current working directory and writing a core dump CVE-2019-11482 Fix available 4.2 MediumOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more Apport reads arbitrary files if ~/.config/apport/settings is a symlink CVE-2019-11481 Fix available 3.8 LowAugust 27, 2019
• apport project apport Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml CVE-2019-7307 Fix available 6.5 MediumJuly 9, 2019
• apport project apport Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing CVE-2018-6552 Fix available 7.8 HighMay 30, 2018
• apport project apport, canonical ubuntu linux +1 more Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace... CVE-2017-14180 Fix available 7.8 HighNovember 15, 2017
• apport project apport, canonical ubuntu linux +1 more Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing... CVE-2017-14179 7.8 HighNovember 15, 2017
• apport project apport, canonical ubuntu linux +1 more Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local... CVE-2017-14177 Fix available 7.8 HighNovember 15, 2017
• apport project apport An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the... CVE-2017-10708 Fix available 7.8 HighJuly 18, 2017
• apport project apport An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a... CVE-2016-9951 Public exploitFix available 6.5 MediumDecember 14, 2016
• apport project apport, canonical ubuntu linux +1 more An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport... CVE-2016-9950 Public exploitFix available 7.8 HighDecember 14, 2016
• apport project apport, canonical ubuntu linux +1 more An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field... CVE-2016-9949 Public exploitFix available EPSS 17.7% 7.8 HighDecember 14, 2016
• apport project apport, canonical ubuntu linux +1 more kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk... CVE-2015-1338 Public exploitFix available 7.2 HighSeptember 24, 2015
• apport project apport The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to... CVE-2015-1318 Public exploitFix available 7.2 HighApril 14, 2015