# Canonical Apport.

Every CVE that names Canonical Apport among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Path Traversal Vulnerability in apport-unpack](https://agentprime.io/advisories/CVE-2026-77113.md)
  `CVE-2026-77113` · CVE record: Canonical Apport · CVSS 6.7 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal
- [Ubuntu Apport Insecure File Permissions Vulnerability](https://agentprime.io/advisories/CVE-2025-5467.md)
  `CVE-2025-5467` · CVE record: Canonical apport · CVSS 1.9 Low · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-708
- [Race Condition in Canonical Apport](https://agentprime.io/advisories/CVE-2025-5054.md)
  `CVE-2025-5054` · CVE record: Canonical Apport · CVSS 4.7 Medium · Not analysed yet · Published 30 May 2025 · Tags: Race condition
- [Apport info disclosure via path traversal bug in read_file](https://agentprime.io/advisories/CVE-2021-3710.md)
  `CVE-2021-3710` · CVE record: Canonical apport · CVSS 6.5 Medium · Not analysed yet · Published 1 Oct 2021 · Tags: Path traversal
- [Apport file permission bypass through emacs byte compilation errors](https://agentprime.io/advisories/CVE-2021-3709.md)
  `CVE-2021-3709` · CVE record: Canonical apport · CVSS 6.5 Medium · Not analysed yet · Published 1 Oct 2021 · Tags: Information disclosure
- [apport process_report() arbitrary file write](https://agentprime.io/advisories/CVE-2021-32557.md)
  `CVE-2021-32557` · CVE record: Canonical apport · CVSS 5.2 Medium · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport get_modified_conffiles() function command injection](https://agentprime.io/advisories/CVE-2021-32556.md)
  `CVE-2021-32556` · CVE record: Canonical apport · CVSS 3.8 Low · Not analysed yet · Published 12 Jun 2021 · Tags: Command injection
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32555.md)
  `CVE-2021-32555` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32554.md)
  `CVE-2021-32554` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32553.md)
  `CVE-2021-32553` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32552.md)
  `CVE-2021-32552` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32551.md)
  `CVE-2021-32551` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32550.md)
  `CVE-2021-32550` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32549.md)
  `CVE-2021-32549` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32548.md)
  `CVE-2021-32548` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32547.md)
  `CVE-2021-32547` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport can be stalled by reading a FIFO](https://agentprime.io/advisories/CVE-2021-25684.md)
  `CVE-2021-25684` · CVE record: Canonical apport · CVSS 8.8 High · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-20
- [apport improperly parses /proc/pid/stat](https://agentprime.io/advisories/CVE-2021-25683.md)
  `CVE-2021-25683` · CVE record: Canonical apport · CVSS 8.8 High · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-20
- [apport improperly parses /proc/pid/status](https://agentprime.io/advisories/CVE-2021-25682.md)
  `CVE-2021-25682` · CVE record: Canonical apport · CVSS 8.8 High · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-20
- [TOCTOU in apport](https://agentprime.io/advisories/CVE-2020-15702.md)
  `CVE-2020-15702` · CVE record: Canonical apport · CVSS 7.0 High · Not analysed yet · Published 6 Aug 2020 · Tags: Race condition
- [Unhandled exception in apport](https://agentprime.io/advisories/CVE-2020-15701.md)
  `CVE-2020-15701` · CVE record: Canonical apport · CVSS 5.5 Medium · Not analysed yet · Published 6 Aug 2020 · Tags: CWE-755
- [Apport reads PID files with elevated privileges](https://agentprime.io/advisories/CVE-2019-15790.md)
  `CVE-2019-15790` · CVE record: Canonical Apport · CVSS 2.8 Low · Not analysed yet · Published 27 Apr 2020 · Tags: Privilege escalation
- [Apport race condition in crash report permissions](https://agentprime.io/advisories/CVE-2020-8833.md)
  `CVE-2020-8833` · CVE record: Canonical Apport · CVSS 5.6 Medium · Not analysed yet · Published 22 Apr 2020 · Tags: Race condition
- [World writable root owned lock file created in user controllable location](https://agentprime.io/advisories/CVE-2020-8831.md)
  `CVE-2020-8831` · CVE record: Canonical Apport · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2020 · Tags: CWE-379
- [apport created lock file in wrong directory](https://agentprime.io/advisories/CVE-2019-11485.md)
  `CVE-2019-11485` · CVE record: Canonical apport · CVSS 3.3 Low · Not analysed yet · Published 8 Feb 2020 · Tags: CWE-412
- [Sander Bos discovered Apport mishandled crash dumps originating from containers.](https://agentprime.io/advisories/CVE-2019-11483.md)
  `CVE-2019-11483` · CVE record: Canonical apport · CVSS 7.0 High · Not analysed yet · Published 8 Feb 2020
- [Race condition between reading current working directory and writing a core dump](https://agentprime.io/advisories/CVE-2019-11482.md)
  `CVE-2019-11482` · CVE record: Canonical apport · CVSS 4.2 Medium · Not analysed yet · Published 8 Feb 2020
- [Apport reads arbitrary files if \~/.config/apport/settings is a symlink](https://agentprime.io/advisories/CVE-2019-11481.md)
  `CVE-2019-11481` · CVE record: Canonical apport · CVSS 3.8 Low · Not analysed yet · Published 8 Feb 2020

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=canonical-apport>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/canonical-apport/>. Everything for agents: <https://agentprime.io/llms.txt>.