Advisories · Technology
Canonical Apport.
Every CVE that names Canonical Apport among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.7 Medium
Path Traversal Vulnerability in apport-unpack
- Canonical Apport
- Path traversal
- CVSS 1.9 Low
Ubuntu Apport Insecure File Permissions Vulnerability
- Canonical apport
- CWE-708
- CVSS 4.7 Medium
Race Condition in Canonical Apport
- Canonical Apport
- Race condition
- CVSS 6.5 Medium
Apport info disclosure via path traversal bug in read_file
- Canonical apport
- Path traversal
- CVSS 6.5 Medium
Apport file permission bypass through emacs byte compilation errors
- Canonical apport
- Information disclosure
- CVSS 5.2 Medium
apport process_report() arbitrary file write
- Canonical apport
- Path traversal
- CWE-61
- CVSS 3.8 Low
apport get_modified_conffiles() function command injection
- Canonical apport
- Command injection
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 7.3 High
apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
- CVSS 8.8 High
apport can be stalled by reading a FIFO
- Canonical apport
- CWE-20
- CVSS 8.8 High
apport improperly parses /proc/pid/stat
- Canonical apport
- CWE-20
- CVSS 8.8 High
apport improperly parses /proc/pid/status
- Canonical apport
- CWE-20
- CVSS 7.0 High
TOCTOU in apport
- Canonical apport
- Race condition
- CVSS 5.5 Medium
Unhandled exception in apport
- Canonical apport
- CWE-755
- CVSS 2.8 Low
Apport reads PID files with elevated privileges
- Canonical Apport
- Privilege escalation
- CVSS 5.6 Medium
Apport race condition in crash report permissions
- Canonical Apport
- Race condition
- CVSS 6.5 Medium
World writable root owned lock file created in user controllable location
- Canonical Apport
- CWE-379
- CVSS 3.3 Low
apport created lock file in wrong directory
- Canonical apport
- CWE-412
- CVSS 7.0 High
Sander Bos discovered Apport mishandled crash dumps originating from containers.
- Canonical apport
- CVSS 4.2 Medium
Race condition between reading current working directory and writing a core dump
- Canonical apport
- CVSS 3.8 Low
Apport reads arbitrary files if ~/.config/apport/settings is a symlink
- Canonical apport