88 matches found
SUSE CVE-2015-1341
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath...
SUSE CVE-2019-11482
Sander Bos discovered a time of check to time of use TOCTTOU vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories...
SUSE CVE-2021-3709
Function checkattachmentforerrors in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to...
Spoofing Attacks
apport is vulnerable to spoofing attacks. The vulnerability exists due to the mishandled filename splitting on older kernels when parsing the Apport argument...
Arbitrary Code Execution
apport is vulnerable to arbitrary code execution. The vulnerability exists beause it does not disable python crash handler before entering chroot which allows an attacker to inject arbitrary codes...
Denial Of Service (DoS)
apport is vulnerable to denial of service. The vulnerability exists due to an lack of validation of the isclosingsession allowing an attacker to crash the system...
Denial Of Service (DoS)
apport is vulnerable to denial of service. An attacker can crash the application through the billion laughs attack by providing a malicious input to the /.config/apport/settings...
Canonical Apport 安全特征问题漏洞
Canonical Apport is a toolkit from Canonical UK that collects and provides feedback on error messages information that the operating system considers useful when an application crashes. Canonical Apport suffers from a security signature issue vulnerability that stems from not filtering D-Bus...
Canonical Apport 品安全漏洞
Canonical Apport is a toolkit from Canonical UK that collects and provides feedback on error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Canonical Apport that stems from incorrectly handling filename parameter...
The vulnerability of the read_file function in the Ubuntu operating system’s error reporting service, Apport, allows a hacker to disclose protected information.
The vulnerability of the readfile function in the Ubuntu operating system’s error reporting service apport is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a attacker to disclose protected information...
USN-5122-2 apport vulnerability
USN-5122-1 fixed a vulnerability in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Apport could be tricked into writing core files as root into arbitrary directories in certain scenarios. A local...
Ubuntu 16.04 ESM : Apport vulnerability (USN-5122-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5122-2 advisory. USN-5122-1 fixed a vulnerability in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...
USN-5122-1 apport vulnerability
It was discovered that Apport could be tricked into writing core files as root into arbitrary directories in certain scenarios. A local attacker could possibly use this issue to escalate privileges. This update will cause Apport to generate all core files in the /var/lib/apport/coredump directory...
Ubuntu 18.04 LTS / 20.04 LTS : Apport vulnerability (USN-5122-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5122-1 advisory. It was discovered that Apport could be tricked into writing core files as root into arbitrary directories in certain scenarios. A local attacker could...
Arbitrary File Read
apport is vulnerable to arbitrary file read...
USN-5077-1 apport vulnerabilities
Maik Münch and Stephen Röttger discovered that Apport incorrectly handled certain information gathering operations. A local attacker could use this issue to gain read access to arbitrary files, possibly containing sensitive information...
CVE-2021-3709
Function checkattachmentforerrors in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to...
PT-2021-4687 · Canonical +1 · Apport +2
Name of the Vulnerable Software and Affected Versions: apport versions prior to 2.14.1-0ubuntu3.29+esm8 apport versions prior to 2.20.1-0ubuntu2.30+esm2 apport versions prior to 2.20.9-0ubuntu7.26 apport versions prior to 2.20.11-0ubuntu27.20 apport versions prior to 2.20.11-0ubuntu65.3...
CVE-2021-32552
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users...