Skip to content
Noroxi

apport project records

24 published records for vendor apport project. 0 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 4.2%
Pre-auth RCE
0
With a fix record
41.7%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2015-1318
    40Plan

    The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport

    HighCVSS 7.2WeaponizedEPSS 4%

    apport project · apportApr 17, 2015

  • CVE-2016-9949
    36Monitor

    An issue was discovered in Apport before 2.20.4.

    HighCVSS 7.8Proof of conceptEPSS 17%

    apport project · apportDec 16, 2016

  • CVE-2016-9950
    33Monitor

    An issue was discovered in Apport before 2.20.4.

    HighCVSS 7.8Proof of conceptEPSS 6%

    apport project · apportDec 16, 2016

  • CVE-2017-10708
    32Monitor

    An issue was discovered in Apport through 2.20.x.

    HighCVSS 7.8No exploitEPSS 2%

    apport project · apportJul 18, 2017

  • CVE-2019-11481
    31Monitor

    Apport reads arbitrary files if ~/.config/apport/settings is a symlink

    HighCVSS 7.8No exploitEPSS 0%

    canonical · ubuntu linuxFeb 8, 2020

  • CVE-2017-14180
    31Monitor

    Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as

    HighCVSS 7.8No exploitEPSS 0%

    apport project · apportFeb 2, 2018

  • CVE-2017-14177
    31Monitor

    Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an

    HighCVSS 7.8No exploitEPSS 0%

    apport project · apportFeb 2, 2018

  • CVE-2018-6552
    31Monitor

    Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

    HighCVSS 7.8No exploitEPSS 0%

    apport project · apportMay 31, 2018

  • CVE-2017-14179
    31Monitor

    Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root wh

    HighCVSS 7.8No exploitEPSS 0%

    apport project · apportFeb 2, 2018

  • CVE-2022-28657
    31Monitor

    Apport does not disable python crash handler before entering chroot

    HighCVSS 7.8No exploitEPSS 0%

    apport project · apportJun 4, 2024

  • CVE-2016-9951
    28Monitor

    An issue was discovered in Apport before 2.20.4.

    MediumCVSS 6.5Proof of conceptEPSS 6%

    apport project · apportDec 16, 2016

  • CVE-2015-1338
    28Monitor

    kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a

    HighCVSS 7.2Proof of conceptEPSS 0%

    apport project · apportOct 1, 2015

  • CVE-2019-7307
    28Monitor

    Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml

    HighCVSS 7.0No exploitEPSS 0%

    apport project · apportAug 29, 2019

  • CVE-2022-28655
    28Monitor

    is_closing_session() allows users to create arbitrary tcp dbus connections

    HighCVSS 7.1No exploitEPSS 0%

    apport project · apportJun 4, 2024

  • CVE-2020-8831
    22Monitor

    World writable root owned lock file created in user controllable location

    MediumCVSS 5.5No exploitEPSS 0%

    canonical · ubuntu linuxApr 22, 2020

  • CVE-2022-28654
    22Monitor

    is_closing_session() allows users to fill up apport.log

    MediumCVSS 5.5No exploitEPSS 0%

    apport project · apportJun 4, 2024

  • CVE-2022-28658
    22Monitor

    Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

    MediumCVSS 5.5No exploitEPSS 0%

    apport project · apportJun 4, 2024

  • CVE-2022-28652
    22Monitor

    ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

    MediumCVSS 5.5No exploitEPSS 0%

    apport project · apportJun 4, 2024

  • CVE-2022-28656
    22Monitor

    is_closing_session() allows users to consume RAM in the Apport process

    MediumCVSS 5.5No exploitEPSS 0%

    apport project · apportJun 4, 2024

  • CVE-2020-8833
    18Monitor

    Apport race condition in crash report permissions

    MediumCVSS 4.7No exploitEPSS 0%

    canonical · ubuntu linuxApr 22, 2020

  • CVE-2019-11482
    18Monitor

    Race condition between reading current working directory and writing a core dump

    MediumCVSS 4.7No exploitEPSS 0%

    canonical · ubuntu linuxFeb 8, 2020

  • CVE-2019-15790
    13Monitor

    Apport reads PID files with elevated privileges

    LowCVSS 3.3No exploitEPSS 0%

    apport project · apportApr 27, 2020

  • CVE-2019-11483
    13Monitor

    Sander Bos discovered Apport mishandled crash dumps originating from containers.

    LowCVSS 3.3No exploitEPSS 0%

    apport project · apportFeb 8, 2020

  • CVE-2019-11485
    13Monitor

    apport created lock file in wrong directory

    LowCVSS 3.3No exploitEPSS 0%

    apport project · apportFeb 8, 2020