Known Vulnerabilities for products from Apport Project
Listed below are 18 of the newest known vulnerabilities associated with the vendor "Apport Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-8833 json | Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privi... | 4.7 - MEDIUM | 2020-04-22 | 2022-10-07 |
| CVE-2020-8831 json | Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport... | 5.5 - MEDIUM | 2020-04-22 | 2022-10-07 |
| CVE-2019-15790 json | Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which ... | 3.3 - LOW | 2020-04-28 | 2023-06-12 |
| CVE-2019-11485 json | Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling. | 3.3 - LOW | 2020-02-08 | 2022-01-01 |
| CVE-2019-11483 json | Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to ge... | 3.3 - LOW | 2020-02-08 | 2020-08-24 |
| CVE-2019-11482 json | Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core file... | 4.7 - MEDIUM | 2020-02-08 | 2020-02-12 |
| CVE-2019-11481 json | Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing t... | 7.8 - HIGH | 2020-02-08 | 2023-06-12 |
| CVE-2019-7307 json | Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 ... | 7 - HIGH | 2019-08-29 | 2023-06-12 |
| CVE-2018-6552 json | Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root... | 7.8 - HIGH | 2018-05-31 | 2019-10-03 |
| CVE-2017-14180 json | Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create c... | 7.8 - HIGH | 2018-02-02 | 2018-02-15 |
| CVE-2017-14179 json | Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain f... | 7.8 - HIGH | 2018-02-02 | 2018-02-15 |
| CVE-2017-14177 json | Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files a... | 7.8 - HIGH | 2018-02-02 | 2018-02-15 |
| CVE-2017-10708 json | An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses ... | Not Provided | 2017-07-18 | 2025-04-20 |
| CVE-2016-9951 json | An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnComma... | Not Provided | 2016-12-17 | 2026-05-06 |
| CVE-2016-9950 json | An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "Sour... | Not Provided | 2016-12-17 | 2026-05-06 |
| CVE-2016-9949 json | An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the fi... | Not Provided | 2016-12-17 | 2026-05-06 |
| CVE-2015-1338 json | kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain pr... | Not Provided | 2015-10-01 | 2026-05-06 |
| CVE-2015-1318 json | The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted u... | Not Provided | 2015-04-17 | 2026-05-06 |
Known software with vulnerabilities from Apport Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Apport Project | Apport | - |