CVE Tools

Apport-project

18 CVEs tracked since 2015. Since Apr 2015, none of them reached CISA KEV.

Apport-project CVEs per month

Apr 2015 to Jun 2024. Point at a month, or focus the strip and use the arrow keys.
Apport-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2015-0410
2015-05null or fewer
2015-06null or fewer
2015-07null or fewer
2015-08null or fewer
2015-09null or fewer
2015-1010
2015-11null or fewer
2015-12null or fewer
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-1230
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-0230
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-0240
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-0660

Products

The products that kept showing up in Apport-project's monthly top three, with their CVEs summed over those months.

  1. Apport186 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Apport-project.

  1. CVE-2022-28658Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing5.5
  2. CVE-2022-28657Apport does not disable python crash handler before entering chroot7.8
  3. CVE-2022-28656is_closing_session() allows users to consume RAM in the Apport process5.5
  4. CVE-2022-28655is_closing_session() allows users to create arbitrary tcp dbus connections7.1
  5. CVE-2022-28654is_closing_session() allows users to fill up apport.log5.5
  6. CVE-2022-28652~/.config/apport/settings parsing is vulnerable to "billion laughs" attack5.5
  7. CVE-2019-15790Apport reads PID files with elevated privileges2.8
  8. CVE-2020-8833Apport race condition in crash report permissions5.6
  9. CVE-2020-8831World writable root owned lock file created in user controllable location6.5
  10. CVE-2019-11485apport created lock file in wrong directory3.3
  11. CVE-2019-11482Race condition between reading current working directory and writing a core dump4.2
  12. CVE-2019-11483Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an un...7.0
  13. CVE-2019-11481Apport reads arbitrary files if ~/.config/apport/settings is a symlink3.8
  14. CVE-2019-7307Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml7.0
  15. CVE-2018-6552Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing7.8

The record

Peak rank
#37 in Dec 2016
Busiest month shown
Jun 2024, 6 CVEs
Months with a KEV entry
0 since Apr 2015
Monthly snapshots
6 since 2015
Apport-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store