Skip to content
fr Sign in
1.9 Low

CVE-2025-5467 It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash…

Description

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.

Affected products and versions

Product Affected versions Fixed in
apport 2.33 2.33.0 → < 2.33.0-0ubuntu1 2.33.0-0ubuntu1
apport 2.32 2.32.0 → < 2.32.0-0ubuntu5.1 2.32.0-0ubuntu5.1
apport 2.28 2.28.1 → < 2.28.1-0ubuntu3.6 2.28.1-0ubuntu3.6
apport 2.20 2.20.1 → < 2.20.11-0ubuntu82.7 2.20.11-0ubuntu82.7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of apport

The 29 CVEs of apport →
CVE-2026-77113 Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to… 6.7 Medium CVE-2025-5054 Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information… 4.7 Medium CVE-2022-28657 Apport does not disable python crash handler before entering chroot 7.8 High CVE-2021-3710 An information disclosure via path traversal was discovered in apport/hookutils.py function read_file() 6.5 Medium
Track this CVE