UBUNTU-CVE-2026-84410
- Source
- https://ubuntu.com/security/CVE-2026-84410
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-84410.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-84410
- Upstream
- Published
- 2026-11-10T00:00:00Z
- Modified
- 2026-11-11T09:41:11Z
- Severity
-
- 7.3 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. The automatic crash report processing pipeline runs as root and executes ldd on the attacker-controlled ExecutablePath field of a crash file placed in the world-writable /var/crash directory, causing the dynamic loader to load and execute an attacker-supplied audit module specified by the ELF's DT_AUDIT tag. This allows an attacker to execute arbitrary code with root privileges and fully compromise the affected system.
- References
Affected packages
Ubuntu:20.04:LTS
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.20.11-0ubuntu8
2.20.11-0ubuntu9
2.20.11-0ubuntu13
2.20.11-0ubuntu14
2.20.11-0ubuntu15
2.20.11-0ubuntu16
2.20.11-0ubuntu17
2.20.11-0ubuntu18
2.20.11-0ubuntu19
2.20.11-0ubuntu20
2.20.11-0ubuntu21
2.20.11-0ubuntu22
2.20.11-0ubuntu24
2.20.11-0ubuntu25
2.20.11-0ubuntu26
2.20.11-0ubuntu27
2.20.11-0ubuntu27.2
2.20.11-0ubuntu27.3
2.20.11-0ubuntu27.4
2.20.11-0ubuntu27.6
2.20.11-0ubuntu27.8
2.20.11-0ubuntu27.9
2.20.11-0ubuntu27.10
2.20.11-0ubuntu27.11
2.20.11-0ubuntu27.12
2.20.11-0ubuntu27.13
2.20.11-0ubuntu27.14
2.20.11-0ubuntu27.16
2.20.11-0ubuntu27.17
2.20.11-0ubuntu27.18
2.20.11-0ubuntu27.20
2.20.11-0ubuntu27.21
2.20.11-0ubuntu27.23
2.20.11-0ubuntu27.24
2.20.11-0ubuntu27.25
2.20.11-0ubuntu27.26
2.20.11-0ubuntu27.27
2.20.11-0ubuntu27.28
2.20.11-0ubuntu27.29
2.20.11-0ubuntu27.30
2.20.11-0ubuntu27.31
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "apport-kde",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "apport-noui",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "dh-apport",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "python3-apport",
"binary_version": "2.20.11-0ubuntu27.31"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.20.11-0ubuntu27.31"
}
]
}Ubuntu:22.04:LTS
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.20.11-0ubuntu70
2.20.11-0ubuntu73
2.20.11-0ubuntu74
2.20.11-0ubuntu75
2.20.11-0ubuntu76
2.20.11-0ubuntu77
2.20.11-0ubuntu78
2.20.11-0ubuntu79
2.20.11-0ubuntu80
2.20.11-0ubuntu81
2.20.11-0ubuntu82
2.20.11-0ubuntu82.1
2.20.11-0ubuntu82.2
2.20.11-0ubuntu82.3
2.20.11-0ubuntu82.4
2.20.11-0ubuntu82.5
2.20.11-0ubuntu82.6
2.20.11-0ubuntu82.7
2.20.11-0ubuntu82.8
2.20.11-0ubuntu82.9
2.20.11-0ubuntu82.10
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "apport-kde",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "apport-noui",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "dh-apport",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "python3-apport",
"binary_version": "2.20.11-0ubuntu82.10"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.20.11-0ubuntu82.10"
}
]
}Ubuntu:24.04:LTS
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.27.0-0ubuntu5
2.27.0-0ubuntu6
2.27.0-0ubuntu7
2.28.0-0ubuntu1
2.28.1-0ubuntu1
2.28.1-0ubuntu2
2.28.1-0ubuntu3
2.28.1-0ubuntu3.1
2.28.1-0ubuntu3.3
2.28.1-0ubuntu3.5
2.28.1-0ubuntu3.6
2.28.1-0ubuntu3.7
2.28.1-0ubuntu3.8
2.28.2-0ubuntu0.1
2.28.3-0ubuntu0.1
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "apport-core-dump-handler",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "apport-kde",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "apport-noui",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "dh-apport",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "python3-apport",
"binary_version": "2.28.3-0ubuntu0.1"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.28.3-0ubuntu0.1"
}
]
}Ubuntu:26.04:LTS
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=resolute
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.33.1-0ubuntu3
2.33.1-0ubuntu4
2.33.1-0ubuntu5
2.33.1-0ubuntu6
2.33.1-0ubuntu7
2.34.0-0ubuntu1
2.34.0-0ubuntu2
2.34.1-0ubuntu0.1
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "apport-core-dump-handler",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "apport-kde",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "apport-noui",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "dh-apport",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "python3-apport",
"binary_version": "2.34.1-0ubuntu0.1"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.34.1-0ubuntu0.1"
}
]
}Ubuntu:26.10
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=stonking
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "apport-core-dump-handler",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "apport-kde",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "apport-noui",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "dh-apport",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "python3-apport",
"binary_version": "2.36.0-0ubuntu1"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.36.0-0ubuntu1"
}
]
}Ubuntu:Pro:14.04:LTS
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=esm-infra-legacy%2Ftrusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.12.5-0ubuntu2
2.12.6-0ubuntu1
2.12.7-0ubuntu1
2.12.7-0ubuntu2
2.12.7-0ubuntu3
2.12.7-0ubuntu6
2.13.1-0ubuntu1
2.13.1-0ubuntu2
2.13.2-0ubuntu2
2.13.2-0ubuntu3
2.13.2-0ubuntu4
2.13.2-0ubuntu5
2.13.3-0ubuntu1
2.14-0ubuntu1
2.14.1-0ubuntu1
2.14.1-0ubuntu2
2.14.1-0ubuntu3
2.14.1-0ubuntu3.1
2.14.1-0ubuntu3.2
2.14.1-0ubuntu3.3
2.14.1-0ubuntu3.4
2.14.1-0ubuntu3.5
2.14.1-0ubuntu3.6
2.14.1-0ubuntu3.7
2.14.1-0ubuntu3.8
2.14.1-0ubuntu3.9
2.14.1-0ubuntu3.10
2.14.1-0ubuntu3.11
2.14.1-0ubuntu3.12
2.14.1-0ubuntu3.13
2.14.1-0ubuntu3.15
2.14.1-0ubuntu3.16
2.14.1-0ubuntu3.18
2.14.1-0ubuntu3.19
2.14.1-0ubuntu3.20
2.14.1-0ubuntu3.21
2.14.1-0ubuntu3.23
2.14.1-0ubuntu3.24
2.14.1-0ubuntu3.25
2.14.1-0ubuntu3.27
2.14.1-0ubuntu3.28
2.14.1-0ubuntu3.29
2.14.1-0ubuntu3.29+esm1
2.14.1-0ubuntu3.29+esm2
2.14.1-0ubuntu3.29+esm3
2.14.1-0ubuntu3.29+esm4
2.14.1-0ubuntu3.29+esm5
2.14.1-0ubuntu3.29+esm6
2.14.1-0ubuntu3.29+esm7
2.14.1-0ubuntu3.29+esm8
2.14.1-0ubuntu3.29+esm9
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "apport-kde",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "apport-noui",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "dh-apport",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "python-apport",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "python-problem-report",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "python3-apport",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.14.1-0ubuntu3.29+esm9"
}
]
}Ubuntu:Pro:16.04:LTS
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=esm-infra%2Fxenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.19.1-0ubuntu3
2.19.2-0ubuntu1
2.19.2-0ubuntu2
2.19.2-0ubuntu3
2.19.2-0ubuntu4
2.19.2-0ubuntu5
2.19.2-0ubuntu6
2.19.2-0ubuntu8
2.19.2-0ubuntu9
2.19.3-0ubuntu1
2.19.3-0ubuntu2
2.19.3-0ubuntu3
2.19.4-0ubuntu1
2.19.4-0ubuntu2
2.20-0ubuntu2
2.20-0ubuntu3
2.20.1-0ubuntu1
2.20.1-0ubuntu2
2.20.1-0ubuntu2.1
2.20.1-0ubuntu2.2
2.20.1-0ubuntu2.4
2.20.1-0ubuntu2.5
2.20.1-0ubuntu2.6
2.20.1-0ubuntu2.9
2.20.1-0ubuntu2.10
2.20.1-0ubuntu2.12
2.20.1-0ubuntu2.13
2.20.1-0ubuntu2.14
2.20.1-0ubuntu2.15
2.20.1-0ubuntu2.16
2.20.1-0ubuntu2.17
2.20.1-0ubuntu2.18
2.20.1-0ubuntu2.19
2.20.1-0ubuntu2.20
2.20.1-0ubuntu2.21
2.20.1-0ubuntu2.22
2.20.1-0ubuntu2.23
2.20.1-0ubuntu2.24
2.20.1-0ubuntu2.25
2.20.1-0ubuntu2.26
2.20.1-0ubuntu2.27
2.20.1-0ubuntu2.28
2.20.1-0ubuntu2.30
2.20.1-0ubuntu2.30+esm1
2.20.1-0ubuntu2.30+esm2
2.20.1-0ubuntu2.30+esm3
2.20.1-0ubuntu2.30+esm4
2.20.1-0ubuntu2.30+esm5
2.20.1-0ubuntu2.30+esm6
2.20.1-0ubuntu2.30+esm7
2.20.1-0ubuntu2.30+esm8
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "apport-kde",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "apport-noui",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "dh-apport",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "python-apport",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "python-problem-report",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "python3-apport",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.20.1-0ubuntu2.30+esm8"
}
]
}Ubuntu:Pro:18.04:LTS
apport
Package
- Name
- apport
- Purl
- pkg:deb/ubuntu/apport?arch=source&distro=esm-infra%2Fbionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.20.7-0ubuntu3
2.20.7-0ubuntu3.1
2.20.7-0ubuntu4
2.20.8-0ubuntu1
2.20.8-0ubuntu2
2.20.8-0ubuntu3
2.20.8-0ubuntu4
2.20.8-0ubuntu5
2.20.8-0ubuntu6
2.20.8-0ubuntu7
2.20.8-0ubuntu8
2.20.8-0ubuntu9
2.20.8-0ubuntu10
2.20.9-0ubuntu1
2.20.9-0ubuntu2
2.20.9-0ubuntu4
2.20.9-0ubuntu5
2.20.9-0ubuntu6
2.20.9-0ubuntu7
2.20.9-0ubuntu7.1
2.20.9-0ubuntu7.2
2.20.9-0ubuntu7.3
2.20.9-0ubuntu7.4
2.20.9-0ubuntu7.5
2.20.9-0ubuntu7.6
2.20.9-0ubuntu7.7
2.20.9-0ubuntu7.8
2.20.9-0ubuntu7.9
2.20.9-0ubuntu7.11
2.20.9-0ubuntu7.12
2.20.9-0ubuntu7.13
2.20.9-0ubuntu7.14
2.20.9-0ubuntu7.15
2.20.9-0ubuntu7.16
2.20.9-0ubuntu7.17
2.20.9-0ubuntu7.18
2.20.9-0ubuntu7.19
2.20.9-0ubuntu7.20
2.20.9-0ubuntu7.21
2.20.9-0ubuntu7.23
2.20.9-0ubuntu7.24
2.20.9-0ubuntu7.26
2.20.9-0ubuntu7.27
2.20.9-0ubuntu7.28
2.20.9-0ubuntu7.29
2.20.9-0ubuntu7.29+esm1
2.20.9-0ubuntu7.29+esm2
2.20.9-0ubuntu7.29+esm3
2.20.9-0ubuntu7.29+esm4
Ecosystem specific
{
"binaries": [
{
"binary_name": "apport",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "apport-gtk",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "apport-kde",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "apport-noui",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "apport-retrace",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "apport-valgrind",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "dh-apport",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "python-apport",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "python-problem-report",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "python3-apport",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
},
{
"binary_name": "python3-problem-report",
"binary_version": "2.20.9-0ubuntu7.29+esm4"
}
]
}