What’s Vulnerable › Vulnerabilities

CVE-2019-11485: apport created lock file in wrong directory

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-08 · updated 2026-06-17
• Weakness: CWE-412

Description

Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.

Affected products

• Apport: all versions
• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 19.04, 19.10

References

• https://usn.ubuntu.com/usn/usn-4171-1
• https://usn.ubuntu.com/usn/usn-4171-2
• https://usn.ubuntu.com/usn/usn-4171-1
• https://usn.ubuntu.com/usn/usn-4171-2

Get alerted when CVE-2019-11485 or the next vulnerability affects your stack