📦 Apport

by Canonical

🔍 What is Apport?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2022-28653

HIGH CVSS 7.5 Jan 31, 2025

CVE-2022-28653 is a denial-of-service vulnerability where users can fill the /var/crash directory with crash reports, consuming unlimited disk space. This affects systems with crash reporting enabled ...

CVE-2022-1242

HIGH CVSS 7.8 Jun 3, 2024

CVE-2022-1242 is a vulnerability in Apport, Ubuntu's crash reporting tool, that allows local attackers to trick Apport into connecting to arbitrary sockets as the root user. This affects Ubuntu system...

CVE-2021-3899

HIGH CVSS 7.8 Jun 3, 2024

CVE-2021-3899 is a race condition vulnerability in Apport's 'replaced executable' detection mechanism that allows local attackers to execute arbitrary code with root privileges. This affects Ubuntu sy...

CVE-2023-1326

HIGH CVSS 7.7 Apr 13, 2023

This CVE describes a local privilege escalation vulnerability in apport-cli versions 2.26.0 and earlier. It allows unprivileged users to gain root privileges when specific conditions are met: sudo is ...

CVE-2021-25682

HIGH CVSS 8.8 Jun 11, 2021

CVE-2021-25682 is a vulnerability in Apport's get_pid_info() function that improperly parses /proc/pid/status files, potentially allowing local privilege escalation. This affects Ubuntu systems with A...

CVE-2021-25684

HIGH CVSS 8.8 Jun 11, 2021

CVE-2021-25684 is a vulnerability in Ubuntu's Apport crash reporting system where improper handling of FIFO (named pipe) files could allow local attackers to cause denial of service or potentially exe...

CVE-2025-5054

MEDIUM CVSS 4.7 May 30, 2025

A race condition vulnerability in Canonical's apport crash reporting tool allows local attackers to leak sensitive information from core dumps. By exploiting PID reuse in container environments, attac...

CVE-2025-5467

LOW CVSS 3.3 Dec 10, 2025

This vulnerability in Canonical's Apport crash reporting tool creates crash files with incorrect group ownership, potentially exposing sensitive crash information to unauthorized users. It affects Ubu...