apport
Canonical
- Product type
- Other
- Catalog vulnerabilities
- 34
Severity across 28 analyzed records
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 09/14/2026, within CyStack's analyzed data, apport has 1 security vulnerability published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of apport and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-77113Path Traversal Vulnerability in apport-unpack | Exploitation statusNot known exploited | FixYes | Published08/20/2026 | SeverityMedium |
CVE-2025-5467Ubuntu Apport Insecure File Permissions Vulnerability | Exploitation statusPublic exploit | FixYes | Published12/10/2025 | SeverityLow |
CVE-2025-5054Race Condition in Canonical Apport | Exploitation statusPublic exploit | FixYes | Published05/30/2025 | SeverityMedium |
CVE-2020-11936 | Exploitation statusPublic exploit | FixYes | Published01/31/2025 | SeverityLow |
CVE-2022-28653 | Exploitation statusNot known exploited | FixYes | Published01/31/2025 | SeverityHigh |
CVE-2022-1242 | Exploitation statusNot known exploited | FixYes | Published06/03/2024 | SeverityHigh |
CVE-2021-3899 | Exploitation statusNot known exploited | FixYes | Published06/03/2024 | SeverityHigh |
CVE-2023-1326local privilege escalation in apport-cli | Exploitation statusNot known exploited | FixYes | Published04/13/2023 | SeverityHigh |
CVE-2021-3710Apport info disclosure via path traversal bug in read_file | Exploitation statusNot confirmed | FixYes | Published10/01/2021 | SeverityMedium |
CVE-2021-3709Apport file permission bypass through emacs byte compilation errors | Exploitation statusNot confirmed | FixYes | Published10/01/2021 | SeverityMedium |
CVE-2021-32557apport process_report() arbitrary file write | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityMedium |
CVE-2021-32556apport get_modified_conffiles() function command injection | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityLow |
CVE-2021-32555apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32554apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32553apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32552apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32551apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32550apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32549apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32548apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-32547apport read_file() function could follow maliciously constructed symbolic links | Exploitation statusNot confirmed | FixYes | Published06/12/2021 | SeverityHigh |
CVE-2021-25684apport can be stalled by reading a FIFO | Exploitation statusNot confirmed | FixYes | Published06/11/2021 | SeverityHigh |
CVE-2021-25683apport improperly parses /proc/pid/stat | Exploitation statusNot confirmed | FixYes | Published06/11/2021 | SeverityHigh |
CVE-2021-25682apport improperly parses /proc/pid/status | Exploitation statusNot confirmed | FixYes | Published06/11/2021 | SeverityHigh |
CVE-2020-15702TOCTOU in apport | Exploitation statusNot confirmed | FixYes | Published08/06/2020 | SeverityHigh |
CVE-2020-15701Unhandled exception in apport | Exploitation statusNot confirmed | FixYes | Published08/06/2020 | SeverityMedium |
CVE-2019-15790Apport reads PID files with elevated privileges | Exploitation statusNot confirmed | FixYes | Published04/27/2020 | SeverityLow |
CVE-2020-8833Apport race condition in crash report permissions | Exploitation statusNot confirmed | FixYes | Published04/22/2020 | SeverityMedium |
CVE-2020-8831World writable root owned lock file created in user controllable location | Exploitation statusNot confirmed | FixYes | Published04/22/2020 | SeverityMedium |
CVE-2019-11485apport created lock file in wrong directory | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityLow |
CVE-2019-11483 | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityHigh |
CVE-2019-11482Race condition between reading current working directory and writing a core dump | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityMedium |
CVE-2019-11481Apport reads arbitrary files if ~/.config/apport/settings is a symlink | Exploitation statusNot confirmed | FixYes | Published02/08/2020 | SeverityLow |
CVE-2015-1341Apport privilege escalation through Python module imports | Exploitation statusNot confirmed | FixYes | Published04/22/2019 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
