7.3
Élevée
CVE-2021-32554 It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs
Description
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.
Produits et versions touchés
Autres CVE de apport
Les 29 CVE de apport →
CVE-2026-77113
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to…
6.7
Moyenne
CVE-2025-5467
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash…
1.9
Faible
CVE-2025-5054
Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information…
4.7
Moyenne
CVE-2022-28657
Apport does not disable python crash handler before entering chroot
7.8
Élevée