Threats tagged 'ghsa-4c8w-67qj-c8vp'

A race condition vulnerability in Canonical's apport up to and including version 2.32.0 allows a local attacker to leak sensitive information by exploiting PID reuse in containerized environments. The flaw arises because apport called a function to detect containerized crashing processes before performing consistency checks to verify if the process had been replaced, enabling core dumps to be forwarded incorrectly and leak data. The issue has been addressed by reordering these checks and restricting forwarding to cases where the kernel provides a pidfd or the crashing process is unprivileged.