Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Canonical apport 2.14.1-0ubuntu3.29+esm2, 2.20.1-0ubuntu2.20 and 2 more versions Clear all filters
TI-2019-08577 CVE-2019-11485 · GHSA-3wqr-pcvr-hx5r

apport created lock file in wrong directory

Priority LOW 16

Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.0026 Published 2020-02-08 Fixed in 2.14.1-0ubuntu3.29+esm2, 2.20.1-0ubuntu2.20 +2 CWE-412
TI-2019-08574 CVE-2019-11482 · GHSA-fggm-83vw-5vwq

Race condition between reading current working directory and writing a core dump

Priority LOW 21

Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00232 Published 2020-02-08 Fixed in 2.14.1-0ubuntu3.29+esm2, 2.20.1-0ubuntu2.20 +2 CWE-367