Description
An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecting against path traversal. This allows remote attackers to execute arbitrary code via a crafted .crash file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | apport | 2.20.1-0ubuntu2.10 | USN-3354-1 |
| Ubuntu 14.04 LTS | apport | 2.14.1-0ubuntu3.25 | USN-3354-1 |
Advisories 1
- USN-3354-1 apport vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026