Apport can be tricked into connecting to arbitrary sockets as the root user

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO

It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel

It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function…

Users can consume unlimited disk space in /var/crash

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks

TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code