---
id: CVE-2025-5467
title: >-
  It was discovered that process_crash() in data/apport in Canonical's Apport
  crash reporting tool may create crash files with incorrect group ownership,
  possibly exposing crash information beyond expected or intended groups.
summary: >-
  It was discovered that process_crash() in data/apport in Canonical's Apport
  crash reporting tool may create crash files with incorrect group ownership,
  possibly exposing crash information beyond expected or intended groups.
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-708
vendor: canonical
product: apport
affected:
  - 'apport >= 2.20.1-0ubuntu1, < 2.20.1-0ubuntu2.30'
  - 'apport >= 2.20.9-0ubuntu7, < 2.20.9-0ubuntu7.29'
  - 'apport >= 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.28'
  - 'apport >= 2.20.11-0ubuntu82, < 2.20.11-0ubuntu82.7'
  - 'apport >= 2.28.1-0ubuntu1, < 2.28.1-0ubuntu3.6'
  - 'apport >= 2.32.0-0ubuntu1, < 2.32.0-0ubuntu5.1'
patched:
  - apport 2.32.0-0ubuntu5.1
published: '2025-12-10'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T21:10:00.183'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-5467'
references:
  - url: 'https://bugs.launchpad.net/apport/+bug/2106338'
    label: security@ubuntu.com
  - url: >-
      https://www.stratascale.com/resource/cve-2025-32462-ubuntu-apport-vulnerability/
    label: security@ubuntu.com
tags:
  - nvd
epss: 0.00175
epssPercentile: 0.06505
ingestedAt: '2026-10-14T21:57:04.790Z'
---

## Overview

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.

## Affected

- `apport >= 2.20.1-0ubuntu1, < 2.20.1-0ubuntu2.30`
- `apport >= 2.20.9-0ubuntu7, < 2.20.9-0ubuntu7.29`
- `apport >= 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.28`
- `apport >= 2.20.11-0ubuntu82, < 2.20.11-0ubuntu82.7`
- `apport >= 2.28.1-0ubuntu1, < 2.28.1-0ubuntu3.6`
- `apport >= 2.32.0-0ubuntu1, < 2.32.0-0ubuntu5.1`

## Remediation

Upgrade past the affected range:

- `apport 2.32.0-0ubuntu5.1`