CVE-2021-25684

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

Design/Logic Flaw

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

CVE-2021-25684 apport can be stalled by reading a FIFO

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

CVE-2021-25684

CVE-2021-25684 affects the Apport component (data/apport) and describes a flaw where it did not properly open a report file, enabling hanging reads on a FIFO. The consequence is local denial of service (hanging reads), with Ubuntu advisories (USN-4720-1/2) documenting fixes for Apport vulnerabili...

CVE-2021-25683 apport improperly parses /proc/pid/stat

It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...

CVE-2021-25683

The CVE-2021-25683 issue affects the Ubuntu Apport component (data/apport). It arises from the get_starttime() function failing to correctly parse /proc/pid/stat, allowing a local attacker to escalate privileges and execute arbitrary code. The vulnerability is classified as HIGH severity (local a...

SUSE: Security Advisory (SUSE-SU-2017:1938-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege Escalation

apport is vulnerable to privilege escalation. The getmodifiedconffiles function incorrect changed files...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The vulnerability exists in the function attach3dinfo in xorg-hwe-18.04...

Arbitrary File Read

apport:groovy is vulnerable to arbitrary file read due to a flaw in the function attach3dinfo...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The addinfo function allows arbitary file read in openjdk-17...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The vulnerability exists in the function addinfo...

Arbitrary File Read

apport:focal is vulnerable to arbitary file read due to a flaw in the function addinfo...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The addinfo function allows arbitrary file read in openjdk-14...

Denial Of Service (DoS)

apport is vulnerable to denial of service. The vulnerability exists due to an integer underflow in memcpy...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The addinfo function allows arbitrary file read in openjdk-lts...

Ubuntu Apport 后置链接漏洞

Apport is a toolkit for collecting and feeding back error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Ubuntu Apport that stems from Apport incorrectly handling certain information-gathering operations, which can be...

Ubuntu Apport 后置链接漏洞

Apport is a toolkit for collecting and feeding back error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Ubuntu Apport that stems from incorrect handling of certain information gathering operations, which can be exploite...

Ubuntu Apport 后置链接漏洞

Apport is a toolkit for collecting and giving feedback on error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Ubuntu Apport that stems from incorrect handling of certain information gathering operations, which can be...

Ubuntu Apport 后置链接漏洞

Apport is a toolkit for collecting and feeding back error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Ubuntu Apport that stems from Apport incorrectly handling certain information-gathering operations, which can be...