Skip to content
OpenAdvisories
High USN-6018-1 1 CVE

apport vulnerability

Published Apr 13, 2023 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation
vulnerability in apport-cli when viewing crash reports and unprivileged
users are allowed to run sudo less. A local attacker on a specially
configured system could use this to escalate their privilege.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS apport 2.20.9-0ubuntu7.29
Ubuntu · 20.04 LTS 20.04:LTS apport 2.20.11-0ubuntu27.26
Ubuntu · 22.04 LTS 22.04:LTS apport 2.20.11-0ubuntu82.4

Vulnerabilities 1

  • High 7.7
    CVE-2023-1326 Public exploit

    local privilege escalation in apport-cli

    A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be …

    Canonical Apport apport Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-1326
  • report
    https://launchpad.net/bugs/2016023