| CVE-2026-77113 |
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to…
|
6.7
Medium
|
Aug 20, 2026 |
| CVE-2025-5467 |
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash…
|
1.9
Low
|
Dec 10, 2025 |
| CVE-2025-5054 |
Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information…
|
4.7
Medium
|
May 30, 2025 |
| CVE-2022-28657 |
Apport does not disable python crash handler before entering chroot
|
7.8
High
|
Jun 4, 2024 |
| CVE-2021-3710 |
An information disclosure via path traversal was discovered in apport/hookutils.py function read_file()
|
6.5
Medium
|
Oct 1, 2021 |
| CVE-2021-3709 |
Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private…
|
6.5
Medium
|
Oct 1, 2021 |
| CVE-2021-32557 |
It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via…
|
5.2
Medium
|
Jun 12, 2021 |
| CVE-2021-32556 |
It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting…
|
3.8
Low
|
Jun 12, 2021 |
| CVE-2021-32554 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32555 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32553 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32552 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32551 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32550 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32549 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32548 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-32547 |
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
|
7.3
High
|
Jun 12, 2021 |
| CVE-2021-25684 |
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO
|
8.8
High
|
Jun 11, 2021 |
| CVE-2021-25683 |
It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from…
|
8.8
High
|
Jun 11, 2021 |
| CVE-2021-25682 |
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file…
|
8.8
High
|
Jun 11, 2021 |
| CVE-2020-15702 |
TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code
|
7.0
High
|
Aug 6, 2020 |
| CVE-2020-15701 |
An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial…
|
5.5
Medium
|
Aug 6, 2020 |
| CVE-2019-15790 |
Apport reads and writes information on a crashed process to /proc/pid with elevated privileges
|
2.8
Low
|
Apr 27, 2020 |
| CVE-2020-8833 |
Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a…
|
5.6
Medium
|
Apr 22, 2020 |
| CVE-2020-8831 |
Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory
|
6.5
Medium
|
Apr 22, 2020 |