What’s Vulnerable › Vulnerabilities

CVE-2019-11482: Race condition between reading current working directory and writing a core dump

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-08 · updated 2026-06-17
• Weakness: CWE-367

Description

Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.

Affected products

• Apport: all versions
• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 19.04, 19.10

References

• https://usn.ubuntu.com/usn/usn-4171-1
• https://usn.ubuntu.com/usn/usn-4171-2
• https://usn.ubuntu.com/usn/usn-4171-1
• https://usn.ubuntu.com/usn/usn-4171-2

Get alerted when CVE-2019-11482 or the next vulnerability affects your stack