Canonical Ltd. Apport vulnerabilities

11 vulnerabilities

Known vulnerabilities in Canonical Ltd. Apport, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-3899canonical ltd.apport+3
EPSS score
0.38%
There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.3.1CVE-2020-11936canonical ltd.apport+2
EPSS score
0.34%
gdbus setgid privilege escalation7.8CVE-2022-1242canonical ltd.apport+3
EPSS score
0.23%
Apport can be tricked into connecting to arbitrary sockets as the root user5.5CVE-2022-28654apport_projectapport+3
EPSS score
0.25%
is_closing_session() allows users to fill up apport.log7.8CVE-2022-28657apport_projectapport+3
EPSS score
0.23%
Apport does not disable python crash handler before entering chroot7.5CVE-2022-28653canonical ltd.apport+2
EPSS score
0.40%
Users can consume unlimited disk space in /var/crash5.5CVE-2022-28652apport_projectapport+3
EPSS score
0.20%
~/.config/apport/settings parsing is vulnerable to "billion laughs" attack5.5CVE-2022-28656apport_projectapport+3
EPSS score
0.20%
is_closing_session() allows users to consume RAM in the Apport process7.1CVE-2022-28655apport_projectapport+3
EPSS score
0.21%
is_closing_session() allows users to create arbitrary tcp dbus connections5.5CVE-2022-28658apport_projectapport+3
EPSS score
0.20%
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing7.8CVE-2023-1326canonical ltd.apport+3
EPSS score
0.87%
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.