Sander Bos

Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user.

Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root

eXtplorer exposes /usr and /etc/extplorer over HTTP

Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

Byobu apport hook uploads user's ~/.screenrc

Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges.

Race condition between reading current working directory and writing a core dump

Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privilege

Insecure temporary file use in base-files

apport created lock file in wrong directory