CVE-2013-1067: Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allow...

Security readout for executives and security teams

CVE-2013-1067 is a local information disclosure issue in Apport. Weak permissions on core dump files from setuid binaries could let a local user read data that should remain protected. The source bundle does not provide CVSS, broad product inventory, or evidence of active exploitation. Exposure is most likely on systems running Apport 2.12.5 or earlier with local user access. The bundle only cites an Ubuntu advisory and does not prove impact for other products or distributions. Treat as a maintenance-priority local data exposure risk. It is not presented as remotely exploitable or actively exploited, but affected shared systems should be patched promptly because privileged memory may contain sensitive data. Mitigation focus: Apply the vendor update referenced by Ubuntu USN-2007-1.; Check current vendor guidance for affected release and fixed package details.; Restrict local interactive access to affected systems where practical..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.