Canonical Apport vulnerabilities

• canonical apport Path Traversal Vulnerability in apport-unpack CVE-2026-77113 Public exploitFix available 6.7 MediumAugust 20, 2026
• canonical apport Ubuntu Apport Insecure File Permissions Vulnerability CVE-2025-5467 1.9 LowDecember 10, 2025
• canonical apport, ubuntu linux +1 more Race Condition in Canonical Apport CVE-2025-5054 Public exploitFix available 4.7 MediumMay 29, 2025
• canonical apport, ubuntu linux +1 more local privilege escalation in apport-cli CVE-2023-1326 Public exploitFix available 7.7 HighApril 13, 2023
• canonical apport Users can consume unlimited disk space in /var/crash CVE-2022-28653 7.5 HighMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more Apport argument parsing mishandles filename splitting on older kernels resulting in argument... CVE-2022-28658 Fix available 5.5 MediumMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more Apport does not disable python crash handler before entering chroot CVE-2022-28657 Fix available 7.8 HighMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more is_closing_session() allows users to consume RAM in the Apport process CVE-2022-28656 Fix available 5.5 MediumMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more is_closing_session() allows users to create arbitrary tcp dbus connections CVE-2022-28655 Fix available 7.1 HighMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more is_closing_session() allows users to fill up apport.log CVE-2022-28654 Fix available 5.5 MediumMay 17, 2022
• apport project apport, canonical ubuntu linux +1 more ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack CVE-2022-28652 Fix available 5.5 MediumMay 17, 2022
• canonical apport, ubuntu linux +1 more Apport can be tricked into connecting to arbitrary sockets as the root user CVE-2022-1242 Fix available 7.8 HighMay 17, 2022
• apport, canonical ubuntu linux +1 more There is a race condition in the 'replaced executable' detection that, with the correct local... CVE-2021-3899 Public exploitFix available 7.8 HighMay 17, 2022
• canonical apport Apport info disclosure via path traversal bug in read_file CVE-2021-3710 Fix available 6.5 MediumSeptember 14, 2021
• canonical apport Apport file permission bypass through emacs byte compilation errors CVE-2021-3709 Fix available 6.5 MediumSeptember 14, 2021
• canonical apport apport process_report() arbitrary file write CVE-2021-32557 Fix available 5.2 MediumMay 25, 2021
• canonical apport apport get_modified_conffiles() function command injection CVE-2021-32556 Fix available 3.8 LowMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32555 Fix available 7.3 HighMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32554 Fix available 7.3 HighMay 25, 2021
• canonical apport, oracle openjdk, canonical ubuntu linux +2 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32553 Fix available 7.3 HighMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32552 Fix available 7.3 HighMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32551 Fix available 7.3 HighMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32550 Fix available 7.3 HighMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32549 Fix available 7.3 HighMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32548 Fix available 7.3 HighMay 25, 2021
• canonical apport, ubuntu linux +1 more apport read_file() function could follow maliciously constructed symbolic links CVE-2021-32547 Fix available 7.3 HighMay 25, 2021
• canonical apport apport can be stalled by reading a FIFO CVE-2021-25684 Fix available 8.8 HighFebruary 2, 2021
• canonical apport apport improperly parses /proc/pid/stat CVE-2021-25683 Fix available 8.8 HighFebruary 2, 2021
• canonical apport apport improperly parses /proc/pid/status CVE-2021-25682 Fix available 8.8 HighFebruary 2, 2021
• canonical apport, ubuntu linux +1 more TOCTOU in apport CVE-2020-15702 Fix available 7.0 HighAugust 4, 2020
• canonical apport gdbus setgid privilege escalation CVE-2020-11936 Fix available 3.1 LowAugust 4, 2020
• canonical apport, ubuntu linux +1 more Unhandled exception in apport CVE-2020-15701 Fix available 5.5 MediumMay 13, 2020
• apport project apport, canonical ubuntu linux +1 more Apport race condition in crash report permissions CVE-2020-8833 Fix available 5.6 MediumApril 2, 2020
• apport project apport, canonical ubuntu linux +1 more World writable root owned lock file created in user controllable location CVE-2020-8831 Fix available 6.5 MediumApril 2, 2020
• apport project apport, canonical ubuntu linux +1 more Apport reads PID files with elevated privileges CVE-2019-15790 Fix available 2.8 LowOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more apport created lock file in wrong directory CVE-2019-11485 Fix available 3.3 LowOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be... CVE-2019-11483 Fix available 7.0 HighOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more Race condition between reading current working directory and writing a core dump CVE-2019-11482 Fix available 4.2 MediumOctober 29, 2019
• apport project apport, canonical ubuntu linux +1 more Apport reads arbitrary files if ~/.config/apport/settings is a symlink CVE-2019-11481 Fix available 3.8 LowAugust 27, 2019
• apport project apport Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml CVE-2019-7307 Fix available 6.5 MediumJuly 9, 2019
• apport project apport Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing CVE-2018-6552 Fix available 7.8 HighMay 30, 2018
• apport project apport, canonical ubuntu linux +1 more Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace... CVE-2017-14180 Fix available 7.8 HighNovember 15, 2017
• apport project apport, canonical ubuntu linux +1 more Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing... CVE-2017-14179 7.8 HighNovember 15, 2017
• apport project apport, canonical ubuntu linux +1 more Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local... CVE-2017-14177 Fix available 7.8 HighNovember 15, 2017
• canonical apport, ubuntu linux +1 more Apport privilege escalation through Python module imports CVE-2015-1341 Fix available 7.4 HighOctober 27, 2015