Apport Project Apport 2.20.10
Approved changes feed: RSS · Atom
cpe:2.3:a:apport_project:apport:2.20.10:*:*:*:*:*:*:*
part: a version: 2.20.10 update: *
| Vendor | Apport Project (bdf171e1-8307-557b-994f-f8e93510c65e) |
|---|---|
| Product | Apport (dbe1fca8-11a7-5168-ac04-b425fcc9a320) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-7307 |
vulnerable | 2026-06-08 05:14:14.229041 |
Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml
MEDIUM (6.5)
Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system.
Published: 2019-08-29T14:40:18.750Z
Updated: 2024-09-16T23:56:02.156Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.