https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:49:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-05786 bdu:2020-05786 https://cve.radiocsirt.org/vuln/bdu:2020-05786 https://cve.radiocsirt.org/vuln/cnvd-2020-21469 cnvd-2020-21469 https://cve.radiocsirt.org/vuln/cnvd-2020-21469 https://cve.radiocsirt.org/vuln/euvd-2026-169034 EUVD-2026-169034 https://cve.radiocsirt.org/vuln/euvd-2026-169034 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8831 <p>Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport&#39;s lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> <p>Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport&#39;s lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8831 https://cve.radiocsirt.org/vuln/ghsa-33w2-prhc-2q89 <p>Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport&#39;s lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> <p>Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport&#39;s lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> https://cve.radiocsirt.org/vuln/ghsa-33w2-prhc-2q89 https://cve.radiocsirt.org/vuln/gsd-2020-8831 gsd-2020-8831 https://cve.radiocsirt.org/vuln/gsd-2020-8831 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8831 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apport, Ubuntu:16.04:LTS: apport, Ubuntu:18.04:LTS: apport, Ubuntu:20.04:LTS: apport</p> <p>Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport&#39;s lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apport, Ubuntu:16.04:LTS: apport, Ubuntu:18.04:LTS: apport, Ubuntu:20.04:LTS: apport</p> <p>Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport&#39;s lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8831