← Vulnerability feed

Vulnerability record · CVE-2019-7307 · published 29 August 2019

CVE-2019-7307: Apport project apport toctou race condition vulnerability

Apport Project · Apport

Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system.

7.0 CVSS 3.1 High EPSS 0.33% · top 76.2% CWE-367 · TOCTOU race condition
7.0CVSS 3.1 base score, v2 4.4
0.33%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system.

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1830858 ExploitIssue TrackingVendor Advisory
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-7307.html Vendor Advisory
http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1830858 ExploitIssue TrackingVendor Advisory
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-7307.html Vendor Advisory

Track CVE-2019-7307 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-28657Apport project apport uncontrolled resource consumption vulnerabilityApport does not disable python crash handler before entering chrootEPSS 0.23%7.8CVE-2019-11481Canonical ubuntu linux link following vulnerabilityKevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic …EPSS 0.45%7.8CVE-2018-6552Apport project apport vulnerabilityApport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could…EPSS 0.39%7.8CVE-2017-14180Apport project apport uncontrolled resource consumption vulnerabilityApport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root whi…EPSS 0.44%7.8CVE-2017-14177Apport project apport uncontrolled resource consumption vulnerabilityApport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker…EPSS 0.39%7.8CVE-2017-14179Apport project apport uncontrolled resource consumption vulnerabilityApport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an at…EPSS 0.36%7.8CVE-2017-10708Apport project apport path traversal vulnerabilityAn issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package …EPSS 2.1%7.8CVE-2016-9950Apport project apport path traversal vulnerabilityAn issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These…EPSS 6.5%

Source: NIST National Vulnerability Database (record CVE-2019-7307), CISA KEV, FIRST EPSS (scores of 2026-10-11). This page is refreshed as NVD updates the record.