Apport
Vendor:
First CVE: Apr 30, 2009 · Active for 17 years
30
Total CVEs
More Total CVEs than 96% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 81% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Apport over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 30, 2009
17 years ago
Most Recent CVE
Jan 31, 2025
539 days ago
CVE Severity & Scoring
Apport30 CVEs
17%
27%
57%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local24 (80.0%)
Network3 (10.0%)
Unknown3 (10.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low23 (76.7%)
High4 (13.3%)
Unknown3 (10.0%)
User Interaction
None23 (76.7%)
Unknown3 (10.0%)
Required4 (13.3%)
Privileges Required
Low22 (73.3%)
High0 (0.0%)
None5 (16.7%)
Unknown3 (10.0%)
Top CVEs
Signals from CVEs in this product scope (30 CVEs).
30 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-9949HIGH An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows | Dec 17, 2016 | 7.8 | 45 | NO | YES |
CVE-2015-1318HIGH The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container). | Apr 17, 2015 | 7.2 | 36 | NO | YES |
CVE-2016-9950HIGH An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a pat | Dec 17, 2016 | 7.8 | 31 | NO | YES |
CVE-2016-9951MEDIUM An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be execu | Dec 17, 2016 | 6.5 | 28 | NO | YES |
CVE-2015-1338HIGH kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on / | Oct 1, 2015 | 7.2 | 27 | NO | YES |
CVE-2023-1326HIGH A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run | Apr 13, 2023 | 7.8 | 26 | NO | NO |
CVE-2018-6552HIGH Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial o | May 31, 2018 | 7.8 | 25 | NO | NO |
CVE-2017-10708HIGH An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecti | Jul 18, 2017 | 7.8 | 25 | NO | NO |
CVE-2022-1242HIGH Apport can be tricked into connecting to arbitrary sockets as the root user | Jun 3, 2024 | 7.8 | 24 | NO | NO |
CVE-2021-3899HIGH There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root. | Jun 3, 2024 | 7.8 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (30 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
3.3% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
16.7% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (30 CVEs).
Media Mentions
Signals from CVEs in this product scope (30 CVEs).
Top CNAs Publishing CVEs For Apport
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.20.9 | 2 | 7.4 | 0.4% | 0 | 0 |
| 2.20.7 | 1 | 7.8 | 0.4% | 0 | 0 |
| 2.20.10 | 1 | 7.0 | 0.3% | 0 | 0 |
| 2.20.1 | 2 | 7.4 | 0.4% | 0 | 0 |
| 2.17 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.16.2 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.16.1 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.16 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.15.1 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.15 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.14.7 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.14.6 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.14.5 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.14.4 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.14.3 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.14.2 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.14.1 | 3 | 7.3 | 1.6% | 0 | 1 |
| 2.14 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.13.3 | 1 | 7.2 | 4.2% | 0 | 1 |
| 2.13.2 | 1 | 7.2 | 4.2% | 0 | 1 |