UBUNTU-CVE-2016-9949

An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...

USN-2782-1 apport vulnerability

Gabriel Campana discovered that Apport incorrectly handled Python module imports. A local attacker could use this issue to elevate privileges...

Apport Denial of Service Vulnerability

Apport is a toolkit for Ubuntu that collects and gives feedback on error messages information that the operating system finds useful when an application crashes. A denial-of-service vulnerability exists in versions prior to Apport 2.19, which allows local users to cause a denial of service or...

Ubuntu 14.04 LTS : Apport vulnerability (USN-2569-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2569-2 advisory. USN-2569-1 fixed a vulnerability in Apport. Tavis Ormandy discovered that the fixed packages were still vulnerable to a privilege escalation attack. This update...

Ubuntu 14.04 LTS : Apport vulnerability (USN-2569-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2569-1 advisory. Stphane Graber and Tavis Ormandy independently discovered that Apport incorrectly handled the crash reporting feature. A local attacker could use this issue to ga...

[USN-2007-1] Apport vulnerability

========================================================================== Ubuntu Security Notice USN-2007-1 October 24, 2013 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : apport vulnerability (USN-2007-1)

Martin Carpenter discovered that Apport set incorrect permissions on core dump files generated by setuid binaries. A local attacker could possibly use this issue to obtain privileged information. Note that Tenable Network Security has extracted the preceding description block directly from the...

Ubuntu 8.04 LTS / 8.10 / 9.04 : Apport vulnerability (USN-768-1)

Stephane Chazelas discovered that Apport did not safely remove files from its crash report directory. If Apport had been enabled at some point, a local attacker could remove arbitrary files from the system. Note that Tenable Network Security has extracted the preceding description block directly...