apport can be stalled by reading a FIFO

Apport, a tool that collects crash reports on Linux systems, can be stalled indefinitely when it tries to read a specially crafted FIFO (named pipe) file. An attacker could exploit this to freeze the crash reporting system and prevent security incident investigation.

Apport fails to implement proper file handling when opening report files, making it vulnerable to denial of service via FIFO blocking. An unprivileged attacker can create a malicious FIFO that causes the apport daemon to hang on read operations, disrupting crash report collection and system diagnostics. Impact includes unavailability of crash analysis and potential security monitoring gaps.