Apport does not disable python crash handler before entering chroot

Apport can be tricked into connecting to arbitrary sockets as the root user

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root

Users can consume unlimited disk space in /var/crash

is_closing_session() allows users to create arbitrary tcp dbus connections

Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

is_closing_session() allows users to consume RAM in the Apport process

is_closing_session() allows users to fill up apport.log

~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

gdbus setgid privilege escalation