7.8
High
CVE-2022-1242 Apport can be tricked into connecting to arbitrary sockets as the root user
Description
Apport can be tricked into connecting to arbitrary sockets as the root user
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apport 2.21 | earliest → < 2.21.0 | 2.21.0 |
Other CVEs of Apport
The 11 CVEs of Apport →
CVE-2020-11936
gdbus setgid privilege escalation
3.1
Low
CVE-2022-28653
Users can consume unlimited disk space in /var/crash
7.5
High
CVE-2022-28658
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
5.5
Medium
CVE-2022-28657
Apport does not disable python crash handler before entering chroot
7.8
High