Gerrit Venema discovered that Apport incorrectly handled user settings
files. A local attacker could possibly use this issue to cause Apport to
consume resources, leading to a denial of service. (CVE-2022-28652)
race condition in apport lead to Local Privilege Escalation on Ubuntu
CVE-2021-3899 PoC
Reproduce
Install an older version of apport: sudo apt-get install apport=22011-0ubuntu27 (any version <= 22011-0ubuntu2710 is fine, but you have to download the source code)
(optional) set small pid_max otherwise it will take a longer time to prepare for pid rollback echo 10000 | sudo tee /proc/sys/kernel/pid_max
allow anybody to run ping as ro
Vulmon