Known Vulnerabilities for Apport by Canonical
Listed below are 10 of the newest known vulnerabilities associated with "Apport" by "Canonical".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-86692 json | In apport before 2.37.0, a path traversal vulnerability allows an attacker who can supply a crafted crash report to cause uni... | Not Provided | 2026-11-09 | 2026-11-12 |
| CVE-2026-84410 json | In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root pr... | Not Provided | 2026-11-09 | 2026-11-12 |
| CVE-2026-77113 json | Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to crea... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2025-5467 json | Not Provided | 2025-12-10 | 2026-10-14 | |
| CVE-2023-1326 json | A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is s... | 7.8 - HIGH | 2023-04-13 | 2023-04-19 |
| CVE-2021-32557 json | It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks. | 7.1 - HIGH | 2021-06-12 | 2021-06-23 |
| CVE-2021-32556 json | It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified pac... | 3.3 - LOW | 2021-06-12 | 2021-06-23 |
| CVE-2021-25684 json | It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO. | 7.8 - HIGH | 2021-06-11 | 2021-06-22 |
| CVE-2021-25683 json | It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the ke... | 7.8 - HIGH | 2021-06-11 | 2021-06-22 |
| CVE-2021-25682 json | It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the k... | 7.8 - HIGH | 2021-06-11 | 2022-08-01 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Canonical | Apport | 2.20.9-0ubuntu7.9 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.8 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.7 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.6 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.5 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.4 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.3 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.23 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.21 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.20 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.2 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.19 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.18 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.17 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.16 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.15 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.14 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.13 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.12 | |||
| Application | Canonical | Apport | 2.20.9-0ubuntu7.11 |