CVE-2025-5467
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In Canonical's Apport crash reporting tool, process_crash() in data/apport may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
Risk Assessment
Unauthorized groups may gain access to crash dumps containing potentially sensitive data, resulting in a confidentiality breach.
Recommendation
Update the Apport package to a patched version and review/restrict permissions on crash dump directories.
Other vulnerabilities in Apport
See all- CVE-2015-1325High
A race condition in Apport allows local users to write to arbitrary files and gain root privileges in affected Ubuntu versions.
- CVE-2015-1324High
A vulnerability in Apport before version 2.17.2-0ubuntu1.1 in Ubuntu 15.04 and earlier allows local users to write to arbitrary files and gain root privileges by leveraging incorrect handling of permissions when generating core dumps for setuid binaries.
- CVE-2017-10708High
An issue was discovered in Apport through 2.20.x, where the ExecutablePath field is set in apport/report.py. This allows remote attackers to execute arbitrary code via a crafted .crash file due to a lack of path traversal protection.
- CVE-2016-9950High
An issue was discovered in Apport before version 2.20.4 related to path traversal in the 'Package' and 'SourcePackage' fields of the crash file. An attacker can exploit this vulnerability to execute arbitrary Python files from the local system.
- CVE-2016-9949High
An issue was discovered in Apport before 2.20.4, where the CrashDB field is read and evaluated as Python code if it begins with '{'. This allows remote attackers to execute arbitrary Python code.
- CVE-2015-1338High
A vulnerability in kernel_crashdump in Apport before version 2.19 allows local users to cause a denial of service (disk consumption) or potentially gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
- CVE-2015-1318High
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).
Original NVD description (English source)
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS