Skip to content
CVE PROGRAM SOURCE RECORD1.9 Low

CVE-2025-5467

Ubuntu Apport Insecure File Permissions Vulnerability

Description

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical apport

Default version status: unaffected

  • 2.20.11-0ubuntu82 to < 2.20.11-0ubuntu82.7affected
  • 2.32.0 to < 2.32.0-0ubuntu5.1affected
  • 2.20.9 to < 2.20.9-0ubuntu7.29+esm1affected
  • 2.28.1 to < 2.28.1-0ubuntu3.6affected
  • 2.33.0 to < 2.33.0-0ubuntu1affected
  • 2.20.1 to < 2.20.1-0ubuntu2.30+esm5affected
  • 2.20.11-0ubuntu27 to < 2.20.11-0ubuntu27.28affected

References