Skip to content
OpenAdvisories
Unscored USN-3664-1 1 CVE

apport vulnerability

Published May 30, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Sander Bos discovered that Apport incorrectly handled core dumps when
certain files are missing from /proc. A local attacker could possibly use
this issue to cause a denial of service, gain root privileges, or escape
from containers.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS apport 2.20.1-0ubuntu2.18
Ubuntu · 18.04 LTS 18.04:LTS apport 2.20.9-0ubuntu7.1

Vulnerabilities 1

  • Unscored —
    CVE-2018-6552

    Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

    Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape fro…

    apport Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-6552