850 matches found
USN-5427-1: Apport vulnerabilities
Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2021-3899 Gerrit Venema discovered that Apport incorrectly handled connections to...
PT-2022-19147 · Apport +2 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue is related to Apport not disabling the python crash handler before entering chroot. This could potentially lead to unintended consequences, although specific details about the impa...
PT-2022-19142 · Apport +2 · Apport +2
Name of the Vulnerable Software and Affected Versions: apport affected versions not specified Description: The /.config/apport/settings parsing is vulnerable to a "billion laughs" attack. This issue affects the parsing of settings in the apport configuration file, making it susceptible to a...
PT-2022-13742 · Canonical +1 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue allows Apport to be tricked into connecting to arbitrary sockets as the root user. Recommendations: At the moment, there is no information about a newer version that contains a fix...
PT-2022-19146 · Canonical +1 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue allows users to consume RAM in the Apport process through the is closing session function. Recommendations: At the moment, there is no information about a newer version that contai...
PT-2022-19148 · Apport +2 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue is related to Apport argument parsing, which mishandles filename splitting on older kernels, resulting in argument spoofing. Recommendations: At the moment, there is no information...
PT-2022-19144 · Canonical +1 · Apport +2
Name of the Vulnerable Software and Affected Versions: apport affected versions not specified Description: The issue allows users to fill up apport.log. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
Canonical Apport 竞争条件问题漏洞
Canonical Apport is a toolkit from Canonical UK that collects and feeds error messages information that the operating system considers useful when an application crashes. Canonical Apport suffers from a Competing Conditions Issue vulnerability that arises from Apport incorrectly detecting whether...
Canonical Apport 安全特征问题漏洞
Canonical Apport is a toolkit from Canonical UK for collecting and feeding back error messages information that the operating system finds useful when an application crashes. A security signature issue vulnerability exists in Canonical Apport that stems from incorrectly handling connections to...
Canonical Apport 资源管理错误漏洞
Canonical Apport is a toolkit from Canonical UK that collects and provides feedback on error messages information that the operating system considers useful when an application crashes. A resource management error vulnerability exists in Canonical Apport, which arises from the application not...
Canonical Apport 安全漏洞
Canonical Apport is a toolkit from Canonical UK that is used to collect and provide feedback on error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Canonical Apport that stems from not limiting the number of log entries...
Canonical Apport 安全特征问题漏洞
Canonical Apport is a toolkit from Canonical UK that collects and provides feedback on error messages information that the operating system considers useful when an application crashes. Canonical Apport suffers from a security signature issue vulnerability that stems from not filtering D-Bus...
Canonical Apport 安全漏洞
Canonical Apport is a toolkit from Canonical UK for collecting and feeding back error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Canonical Apport that stems from a system where Apport does not disable the python cras...
Canonical Apport 安全特征问题漏洞
Canonical Apport is a toolkit from Canonical UK for collecting and feeding back error messages information that the operating system finds useful when an application crashes. Canonical Apport suffers from a security signature issue vulnerability that stems from a system where Apport does not...
Canonical Apport 品安全漏洞
Canonical Apport is a toolkit from Canonical UK that collects and provides feedback on error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Canonical Apport that stems from incorrectly handling filename parameter...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Apport vulnerabilities (USN-5427-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5427-1 advisory. Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local...
apport-job.com Cross Site Scripting vulnerability OBB-2495773
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ubuntu 16.04 ESM : Byobu vulnerability (USN-5234-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5234-1 advisory. Sander Bos discovered that Byobu incorrectly handled certain Apport data. An attacker could possibly use this issue to expose sensitive information. Tenable has...
