Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

canonical apport vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3

CVE-2021-3709

Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions before 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions before 2.20.1-0ubuntu2.30+esm2; 2.20.9 ...
Canonical Apport 2.14.1-0ubuntu1Canonical Apport 2.14.1-0ubuntu2Canonical Apport 2.14.1-0ubuntu3Canonical Apport 2.14.1-0ubuntu3.1Canonical Apport 2.14.1-0ubuntu3.2Canonical Apport 2.14.1-0ubuntu3.3Canonical Apport 2.14.1-0ubuntu3.4Canonical Apport 2.14.1-0ubuntu3.5Canonical Apport 2.14.1-0ubuntu3.6Canonical Apport 2.14.1-0ubuntu3.7Canonical Apport 2.14.1-0ubuntu3.8Canonical Apport 2.14.1-0ubuntu3.9
5.5
CVSSv3

CVE-2021-3710

An information disclosure via path traversal exists in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions before 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions before 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions before 2.20.9-0ubuntu7.26; 2.20.11 versions ...
Canonical Apport 2.14.1-0ubuntu1Canonical Apport 2.14.1-0ubuntu2Canonical Apport 2.14.1-0ubuntu3Canonical Apport 2.14.1-0ubuntu3.1Canonical Apport 2.14.1-0ubuntu3.2Canonical Apport 2.14.1-0ubuntu3.3Canonical Apport 2.14.1-0ubuntu3.4Canonical Apport 2.14.1-0ubuntu3.5Canonical Apport 2.14.1-0ubuntu3.6Canonical Apport 2.14.1-0ubuntu3.7Canonical Apport 2.14.1-0ubuntu3.8Canonical Apport 2.14.1-0ubuntu3.9
5.5
CVSSv3

CVE-2020-15701

An unhandled exception in check_ignored() in apport/report.py can be exploited by a local malicious user to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubu...
Canonical Apport 2.20.11-0ubuntu8Canonical Apport 2.20.11-0ubuntu9Canonical Apport 2.20.11-0ubuntu10Canonical Apport 2.20.11-0ubuntu11Canonical Apport 2.20.11-0ubuntu12Canonical Apport 2.20.11-0ubuntu13Canonical Apport 2.20.11-0ubuntu14Canonical Apport 2.20.11-0ubuntu15Canonical Apport 2.20.11-0ubuntu16Canonical Apport 2.20.11-0ubuntu17Canonical Apport 2.20.11-0ubuntu18Canonical Apport 2.20.11-0ubuntu19
7
CVSSv3

CVE-2020-15702

TOCTOU Race Condition vulnerability in apport allows a local malicious user to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be us...
Canonical Apport 2.20.11-0ubuntu8Canonical Apport 2.20.11-0ubuntu9Canonical Apport 2.20.11-0ubuntu10Canonical Apport 2.20.11-0ubuntu11Canonical Apport 2.20.11-0ubuntu12Canonical Apport 2.20.11-0ubuntu13Canonical Apport 2.20.11-0ubuntu14Canonical Apport 2.20.11-0ubuntu15Canonical Apport 2.20.11-0ubuntu16Canonical Apport 2.20.11-0ubuntu17Canonical Apport 2.20.11-0ubuntu18Canonical Apport 2.20.11-0ubuntu19
7.8
CVSSv3

CVE-2016-9949

An issue exists in Apport prior to 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote malicious users to execute arbitrary Python code.
Apport Project ApportCanonical Ubuntu Linux
7.8
CVSSv3

CVE-2016-9950

An issue exists in Apport prior to 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory...
Apport Project ApportCanonical Ubuntu Linux
7.2
CVSSv2

CVE-2015-1338

kernel_crashdump in Apport prior to 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
Apport Project ApportCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04
3.3
CVSSv3

CVE-2021-32556

It exists that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.
Canonical Apport
7.1
CVSSv3

CVE-2021-32557

It exists that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.
Canonical Apport
7.8
CVSSv3

CVE-2021-25682

It exists that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
Canonical Apport
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
booking & appointment - repute infosystemsCVE-2024-12826stored XSS7-zipCVE-2025-0703CVE-2025-0411CVE-2024-43468themerex addonswirelessCVE-2025-23006herd effectsCVE-2025-0707information disclosure
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook