CVE-2022-1242

CVE-2022-1242 affects the Ubuntu Apport component. The issue allows a local attacker to trick Apport into connecting to arbitrary sockets as root due to improper handling of Apport sockets (in containers too). Affected advisories include USN-6894-1 and related Red Hat/Nessus/OpenVAS entries; patc...

CVE-2021-3899

CVE-2021-3899 involves a race condition in Apport's replaced-executable detection that, with specific local configuration, could allow a local attacker to run arbitrary code as root. This vulnerability is referenced in multiple advisories (Ubuntu USN-6894-1, RH Red Hat CVE notes, and Nessus/OSV e...

CVE-2023-1326

Technical details for CVE-2023-1326 are not provided in the connected documents. Available sources reference the vulnerability and related CVEs (e.g., CVE-2023-26604) but do not expose affected products, versions, or fixes beyond the apport-cli context.

CVE-2025-5467

Technical details for CVE-2025-5467 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from upstream advisories and connected sources.

CVE-2021-32557

CVE-2021-32557 fixes a vulnerability in Ubuntu Apport where process_report() in data/whoopsie-upload-all could write arbitrary files via symlinks. The CVSSv3.1 vector (LOCAL, LOW to MEDIUM/LOW privileges, I and A HIGH) points to a LOCAL attack with high impact on integrity and availability. Affec...

CVE-2021-32556

CVE-2021-32556 affects Ubuntu Apport tooling. The get_modified_conffiles() function in backends/packaging-apt-dpkg.py can inject modified package names to confuse the dpkg call, enabling local manipulation of package handling. Affected component is Apport’s packaging-related code (dpkg interactio...

CVE-2025-5054

CVE-2025-5054 summary (Mode C) Affected software: Canonical Apport (Linux crash reporter) up to version 2.32.0. Vulnerability: A race condition in Apport’s crash handling logic allows a local attacker to leak sensitive information by abusing PID reuse and namespace/container handling. Specificall...

CVE-2020-11936

CVE-2020-11936 affects the Ubuntu Apport component. The issue is a gdbus setgid privilege escalation caused by Apport dropping privileges incorrectly when making certain D-Bus calls, enabling a local attacker to read arbitrary files and potentially escalate privileges. The Ubuntu advisory USN-444...

CVE-2021-25684

CVE-2021-25684 affects the Apport component (data/apport) and describes a flaw where it did not properly open a report file, enabling hanging reads on a FIFO. The consequence is local denial of service (hanging reads), with Ubuntu advisories (USN-4720-1/2) documenting fixes for Apport vulnerabili...

CVE-2021-25682

CVE-2021-25682 concerns Apport’s get_pid_info() failing to correctly parse /proc/pid/status, as reported in multiple advisories. Technical details across sources show a local attacker could exploit this in Ubuntu-derived environments via Apport, with likely local privilege escalation and potentia...

CVE-2021-25683

The CVE-2021-25683 issue affects the Ubuntu Apport component (data/apport). It arises from the get_starttime() function failing to correctly parse /proc/pid/stat, allowing a local attacker to escalate privileges and execute arbitrary code. The vulnerability is classified as HIGH severity (local a...

CVE-2015-1341

Summary (CVE-2015-1341) : The Ubuntu/apport vulnerability allows a local attacker to escalate privileges by abusing Python module imports. Specifically, if the triggering process runs Python with the first argument -m and triggers a coredump, any Python module on sys.path could be imported by App...

CVE-2021-3709

CVE-2021-3709 affects Apport. The issue arises from function check_attachment_for_errors() in data/general-hooks/ubuntu.py, which could be tricked by a constructed crash file to expose private data. Affected versions include apport 2.14.1 before 2.14.1-0ubuntu3.29+esm8; 2.20.1 before 2.20.1-0ubun...

CVE-2020-15702

CVE-2020-15702 describes a TOCTOU race condition in the Apport component of Ubuntu. The vulnerability allows a local attacker to escalate privileges and potentially execute arbitrary code by exploiting PID recycling after a crash, enabling a root process to inherit the crashed process’ PID. Affec...

CVE-2021-3710

CVE-2021-3710 is an information disclosure via path traversal in the Ubuntu apport package. The vulnerability is in apport/hookutils.py read_file() and affects multiple versions prior to respective updates: 2.14.1, 2.20.1, 2.20.9, and 2.20.11 (specific Ubuntu-linked package revisions listed in th...

CVE-2020-15701

The CVE-2020-15701 issue affects the apport component (Apport) where an unhandled exception in check_ignored() can crash the process if mtime in apport-ignore.xml is a string, enabling a local DoS. Exploitation details are not described beyond local access prerequisites. The vulnerability is addr...

CVE-2022-28653

CVE-2022-28653 Overview: Affects the Apport crash-reporting component used in Linux/Ubuntu environments. Description across connected documents consistently states: unlimited disk space can be consumed in /var/crash, which can lead to disk-space exhaustion and potential availability impact. Root ...