İçeriğe atla
Noroxi

apport project kayıtları

apport project üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %4,2
Pre-auth RCE
0
Düzeltme kaydı olan
%41,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2015-1318
    40Planlayın

    The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport

    YüksekCVSS 7,2SilahlaştırılmışEPSS %4

    apport project · apport17 Nis 2015

  • CVE-2016-9949
    36İzleyin

    An issue was discovered in Apport before 2.20.4.

    YüksekCVSS 7,8Kavram kanıtıEPSS %17

    apport project · apport16 Ara 2016

  • CVE-2016-9950
    33İzleyin

    An issue was discovered in Apport before 2.20.4.

    YüksekCVSS 7,8Kavram kanıtıEPSS %6

    apport project · apport16 Ara 2016

  • CVE-2017-10708
    32İzleyin

    An issue was discovered in Apport through 2.20.x.

    YüksekCVSS 7,8İstismar yokEPSS %2

    apport project · apport18 Tem 2017

  • CVE-2019-11481
    31İzleyin

    Apport reads arbitrary files if ~/.config/apport/settings is a symlink

    YüksekCVSS 7,8İstismar yokEPSS %0

    canonical · ubuntu linux8 Şub 2020

  • CVE-2017-14180
    31İzleyin

    Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as

    YüksekCVSS 7,8İstismar yokEPSS %0

    apport project · apport2 Şub 2018

  • CVE-2017-14177
    31İzleyin

    Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an

    YüksekCVSS 7,8İstismar yokEPSS %0

    apport project · apport2 Şub 2018

  • CVE-2018-6552
    31İzleyin

    Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

    YüksekCVSS 7,8İstismar yokEPSS %0

    apport project · apport31 May 2018

  • CVE-2017-14179
    31İzleyin

    Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root wh

    YüksekCVSS 7,8İstismar yokEPSS %0

    apport project · apport2 Şub 2018

  • CVE-2022-28657
    31İzleyin

    Apport does not disable python crash handler before entering chroot

    YüksekCVSS 7,8İstismar yokEPSS %0

    apport project · apport4 Haz 2024

  • CVE-2016-9951
    28İzleyin

    An issue was discovered in Apport before 2.20.4.

    OrtaCVSS 6,5Kavram kanıtıEPSS %6

    apport project · apport16 Ara 2016

  • CVE-2015-1338
    28İzleyin

    kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    apport project · apport1 Eki 2015

  • CVE-2019-7307
    28İzleyin

    Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml

    YüksekCVSS 7,0İstismar yokEPSS %0

    apport project · apport29 Ağu 2019

  • CVE-2022-28655
    28İzleyin

    is_closing_session() allows users to create arbitrary tcp dbus connections

    YüksekCVSS 7,1İstismar yokEPSS %0

    apport project · apport4 Haz 2024

  • CVE-2020-8831
    22İzleyin

    World writable root owned lock file created in user controllable location

    OrtaCVSS 5,5İstismar yokEPSS %0

    canonical · ubuntu linux22 Nis 2020

  • CVE-2022-28654
    22İzleyin

    is_closing_session() allows users to fill up apport.log

    OrtaCVSS 5,5İstismar yokEPSS %0

    apport project · apport4 Haz 2024

  • CVE-2022-28658
    22İzleyin

    Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

    OrtaCVSS 5,5İstismar yokEPSS %0

    apport project · apport4 Haz 2024

  • CVE-2022-28652
    22İzleyin

    ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

    OrtaCVSS 5,5İstismar yokEPSS %0

    apport project · apport4 Haz 2024

  • CVE-2022-28656
    22İzleyin

    is_closing_session() allows users to consume RAM in the Apport process

    OrtaCVSS 5,5İstismar yokEPSS %0

    apport project · apport4 Haz 2024

  • CVE-2020-8833
    18İzleyin

    Apport race condition in crash report permissions

    OrtaCVSS 4,7İstismar yokEPSS %0

    canonical · ubuntu linux22 Nis 2020

  • CVE-2019-11482
    18İzleyin

    Race condition between reading current working directory and writing a core dump

    OrtaCVSS 4,7İstismar yokEPSS %0

    canonical · ubuntu linux8 Şub 2020

  • CVE-2019-15790
    13İzleyin

    Apport reads PID files with elevated privileges

    DüşükCVSS 3,3İstismar yokEPSS %0

    apport project · apport27 Nis 2020

  • CVE-2019-11483
    13İzleyin

    Sander Bos discovered Apport mishandled crash dumps originating from containers.

    DüşükCVSS 3,3İstismar yokEPSS %0

    apport project · apport8 Şub 2020

  • CVE-2019-11485
    13İzleyin

    apport created lock file in wrong directory

    DüşükCVSS 3,3İstismar yokEPSS %0

    apport project · apport8 Şub 2020