apport

52 results · Feed

• High 7.4
  CVE-2015-1341

  Apport privilege escalation through Python module imports

  Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.

  Ubuntu apport apport Ubuntu
  Apr 22, 2019
• Unscored —
  CVE-2018-6552

  Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

  Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape fro…

  apport Ubuntu
  May 31, 2018
• Unscored —
  CVE-2017-14180

  Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to cr…

  *** n/a *** Apport apport Ubuntu
  Feb 2, 2018
• Unscored —
  CVE-2017-14177

  Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain f…

  apport Ubuntu
  Feb 2, 2018
• Unscored —
  CVE-2015-1324

  Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, befor…

  apport Ubuntu
  Aug 25, 2017
• Unscored —
  CVE-2015-1325 Public exploit

  Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in U…

  apport Ubuntu
  Aug 25, 2017
• Unscored —
  CVE-2017-10708

  An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then…

  apport Ubuntu
  Jul 18, 2017
• Unscored —
  CVE-2016-9951 Public exploit

  An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `Respaw…

  apport Ubuntu
  Dec 17, 2016
• Unscored —
  CVE-2016-9949 Public exploit EPSS 18%

  An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates …

  apport Ubuntu
  Dec 17, 2016
• Unscored —
  CVE-2016-9950 Public exploit

  An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and…

  apport Ubuntu
  Dec 17, 2016
• Unscored —
  CVE-2015-1338 Public exploit

  kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly g…

  apport Ubuntu
  Oct 1, 2015
• Unscored —
  CVE-2015-1318 Public exploit

  The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a cra…

  apport Ubuntu
  Apr 17, 2015