Aller au contenu
Se connecter
1.9 Faible

CVE-2025-5467 It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash…

Description

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.

Produits et versions touchés

Produit Versions touchées Corrigé en
apport 2.33 2.33.0 → < 2.33.0-0ubuntu1 2.33.0-0ubuntu1
apport 2.32 2.32.0 → < 2.32.0-0ubuntu5.1 2.32.0-0ubuntu5.1
apport 2.28 2.28.1 → < 2.28.1-0ubuntu3.6 2.28.1-0ubuntu3.6
apport 2.20 2.20.1 → < 2.20.11-0ubuntu82.7 2.20.11-0ubuntu82.7

Autres CVE de apport

Les 29 CVE de apport →
CVE-2026-77113 Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to… 6.7 Moyenne CVE-2025-5054 Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information… 4.7 Moyenne CVE-2022-28657 Apport does not disable python crash handler before entering chroot 7.8 Élevée CVE-2021-3710 An information disclosure via path traversal was discovered in apport/hookutils.py function read_file() 6.5 Moyenne
Suivre cette CVE