https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5467.htmlhttps://patchthecve.com/cve/CVE-2025-5467.htmlWed, 14 Oct 2026 21:10:00 +0000LOW 3.3: It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.https://patchthecve.com/cve/CVE-2025-5054.htmlhttps://patchthecve.com/cve/CVE-2025-5054.htmlWed, 17 Jun 2026 09:47:06 +0000MEDIUM 4.7: Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a container, was beinghttps://patchthecve.com/cve/CVE-2020-11936.htmlhttps://patchthecve.com/cve/CVE-2020-11936.htmlWed, 17 Jun 2026 02:51:05 +0000LOW 3.1: gdbus setgid privilege escalationhttps://patchthecve.com/cve/CVE-2022-28653.htmlhttps://patchthecve.com/cve/CVE-2022-28653.htmlWed, 17 Jun 2026 04:38:47 +0000HIGH 7.5: Users can consume unlimited disk space in /var/crashhttps://patchthecve.com/cve/CVE-2022-1242.htmlhttps://patchthecve.com/cve/CVE-2022-1242.htmlWed, 17 Jun 2026 04:22:04 +0000HIGH 7.8: Apport can be tricked into connecting to arbitrary sockets as the root userhttps://patchthecve.com/cve/CVE-2021-3899.htmlhttps://patchthecve.com/cve/CVE-2021-3899.htmlWed, 17 Jun 2026 04:05:57 +0000HIGH 7.8: There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.https://patchthecve.com/cve/CVE-2023-1326.htmlhttps://patchthecve.com/cve/CVE-2023-1326.htmlWed, 17 Jun 2026 05:27:39 +0000HIGH 7.7: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilhttps://patchthecve.com/cve/CVE-2021-3710.htmlhttps://patchthecve.com/cve/CVE-2021-3710.htmlWed, 17 Jun 2026 04:05:36 +0000MEDIUM 6.5: An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior https://patchthecve.com/cve/CVE-2021-3709.htmlhttps://patchthecve.com/cve/CVE-2021-3709.htmlWed, 17 Jun 2026 04:05:36 +0000MEDIUM 6.5: Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior thttps://patchthecve.com/cve/CVE-2021-32557.htmlhttps://patchthecve.com/cve/CVE-2021-32557.htmlWed, 17 Jun 2026 03:53:10 +0000MEDIUM 5.2: It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.https://patchthecve.com/cve/CVE-2021-32556.htmlhttps://patchthecve.com/cve/CVE-2021-32556.htmlWed, 17 Jun 2026 03:53:10 +0000LOW 3.8: It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.https://patchthecve.com/cve/CVE-2021-25684.htmlhttps://patchthecve.com/cve/CVE-2021-25684.htmlWed, 17 Jun 2026 03:42:21 +0000HIGH 8.8: It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO.https://patchthecve.com/cve/CVE-2021-25683.htmlhttps://patchthecve.com/cve/CVE-2021-25683.htmlWed, 17 Jun 2026 03:42:21 +0000HIGH 8.8: It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel.https://patchthecve.com/cve/CVE-2021-25682.htmlhttps://patchthecve.com/cve/CVE-2021-25682.htmlWed, 17 Jun 2026 03:42:21 +0000HIGH 8.8: It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.https://patchthecve.com/cve/CVE-2020-15702.htmlhttps://patchthecve.com/cve/CVE-2020-15702.htmlWed, 17 Jun 2026 02:57:04 +0000HIGH 7.0: TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges.https://patchthecve.com/cve/CVE-2020-15701.htmlhttps://patchthecve.com/cve/CVE-2020-15701.htmlWed, 17 Jun 2026 02:57:04 +0000MEDIUM 5.5: An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.1https://patchthecve.com/cve/CVE-2019-15790.htmlhttps://patchthecve.com/cve/CVE-2019-15790.htmlWed, 17 Jun 2026 02:21:04 +0000LOW 2.8: Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through get_pid_info() in data/apport. An unprivileged user could exploit this to read information about a privileged https://patchthecve.com/cve/CVE-2020-8833.htmlhttps://patchthecve.com/cve/CVE-2020-8833.htmlWed, 17 Jun 2026 03:27:01 +0000MEDIUM 5.6: Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash fihttps://patchthecve.com/cve/CVE-2020-8831.htmlhttps://patchthecve.com/cve/CVE-2020-8831.htmlWed, 17 Jun 2026 03:27:01 +0000MEDIUM 6.5: Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directohttps://patchthecve.com/cve/CVE-2019-11485.htmlhttps://patchthecve.com/cve/CVE-2019-11485.htmlWed, 17 Jun 2026 02:12:59 +0000LOW 3.3: Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.https://patchthecve.com/cve/CVE-2019-11483.htmlhttps://patchthecve.com/cve/CVE-2019-11483.htmlWed, 17 Jun 2026 02:12:59 +0000HIGH 7.0: Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user.https://patchthecve.com/cve/CVE-2019-11482.htmlhttps://patchthecve.com/cve/CVE-2019-11482.htmlWed, 17 Jun 2026 02:12:59 +0000MEDIUM 4.2: Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.https://patchthecve.com/cve/CVE-2019-11481.htmlhttps://patchthecve.com/cve/CVE-2019-11481.htmlWed, 17 Jun 2026 02:12:59 +0000LOW 3.8: Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic link, a user could get apport to read any file on the system as root, with unknown consequences.https://patchthecve.com/cve/CVE-2019-7307.htmlhttps://patchthecve.com/cve/CVE-2019-7307.htmlWed, 17 Jun 2026 02:40:25 +0000HIGH 7.0: Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the https://patchthecve.com/cve/CVE-2015-1341.htmlhttps://patchthecve.com/cve/CVE-2015-1341.htmlWed, 17 Jun 2026 00:22:13 +0000HIGH 7.4: Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.https://patchthecve.com/cve/CVE-2018-6552.htmlhttps://patchthecve.com/cve/CVE-2018-6552.htmlWed, 17 Jun 2026 02:02:00 +0000HIGH 7.8: Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function rhttps://patchthecve.com/cve/CVE-2017-14180.htmlhttps://patchthecve.com/cve/CVE-2017-14180.htmlWed, 17 Jun 2026 01:05:44 +0000HIGH 7.8: Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability than Chttps://patchthecve.com/cve/CVE-2017-14179.htmlhttps://patchthecve.com/cve/CVE-2017-14179.htmlWed, 17 Jun 2026 01:05:44 +0000HIGH 7.8: Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers.https://patchthecve.com/cve/CVE-2017-14177.htmlhttps://patchthecve.com/cve/CVE-2017-14177.htmlWed, 17 Jun 2026 01:05:43 +0000HIGH 7.8: Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vulnerability exists because of anhttps://patchthecve.com/cve/CVE-2017-10708.htmlhttps://patchthecve.com/cve/CVE-2017-10708.htmlWed, 17 Jun 2026 01:00:33 +0000HIGH 7.8: An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecting against path traversal. This allows remote attackers to execute arbitrary code via a crafted .crash file.https://patchthecve.com/cve/CVE-2016-9951.htmlhttps://patchthecve.com/cve/CVE-2016-9951.htmlWed, 17 Jun 2026 00:56:49 +0000MEDIUM 6.5: An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show thehttps://patchthecve.com/cve/CVE-2016-9950.htmlhttps://patchthecve.com/cve/CVE-2016-9950.htmlWed, 17 Jun 2026 00:56:49 +0000HIGH 7.8: An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this pathttps://patchthecve.com/cve/CVE-2016-9949.htmlhttps://patchthecve.com/cve/CVE-2016-9949.htmlWed, 17 Jun 2026 00:56:49 +0000HIGH 7.8: An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.https://patchthecve.com/cve/CVE-2015-1338.htmlhttps://patchthecve.com/cve/CVE-2015-1338.htmlWed, 17 Jun 2026 00:22:13 +0000HIGH 7.2: kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.https://patchthecve.com/cve/CVE-2015-1318.htmlhttps://patchthecve.com/cve/CVE-2015-1318.htmlWed, 17 Jun 2026 00:22:11 +0000HIGH 7.2: The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).