CVE-2016-9949: Apport Project Apport

High severity, CVSS 7.8. EPSS: 17.7% chance of exploitation in the next 30 days.

An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.

Affected products

• Apport Project Apport: up to and including 2.20.3
• Canonical Ubuntu Linux: up to and including 12.10

Published 2016-12-17. Last modified 2026-06-17.