https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T14:15:40.314388+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-8831 CVE-2020-8831 — World writable root owned lock file created in user controllable location 2026-10-04T14:15:40.497999+00:00

Affected: Canonical Apport

Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply continue execution using the existing directory. This allows for a symlink attack if an attacker were to create a symlink at /var/lock/apport, changing apport's lock file location. This file could then be used to escalate privileges, for example. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.

 https://vulnerability.circl.lu/vuln/usn-4315-1 USN-4315-1 — apport vulnerabilities 2026-10-04T14:15:40.498140+00:00

Affected: Ubuntu:16.04:LTS: apport, Ubuntu:18.04:LTS: apport

Maximilien Bourgeteau discovered that the Apport lock file was created with insecure permissions. This could allow a local attacker to escalate their privileges via a symlink attack. (CVE-2020-8831)

Maximilien Bourgeteau discovered a race condition in Apport when setting crash report permissions. This could allow a local attacker to read arbitrary files via a symlink attack. (CVE-2020-8833)