Description (CNA)
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Canonical / apport | affected 2.20.11-0ubuntu82 before 2.20.11-0ubuntu82.7; affected 2.32.0 before 2.32.0-0ubuntu5.1; affected 2.20.9 before 2.20.9-0ubuntu7.29+esm1; affected 2.28.1 before 2.28.1-0ubuntu3.6; affected 2.33.0 before 2.33.0-0ubuntu1; affected 2.20.1 before 2.20.1-0ubuntu2.30+esm5; affected 2.20.11-0ubuntu27 before 2.20.11-0ubuntu27.28 |
CWE
CWE-708
References
- https://www.stratascale.com/resource/cve-2025-32462-ubuntu-apport-vulnerability/
- https://bugs.launchpad.net/apport/+bug/2106338
ADP enrichment
No English description supplied.
No references supplied.