CVE-2021-32554
Assigner: canonical
Published: 2021-05-25T00:00:00
State: PUBLISHED
affected: product: apport
vendor: Canonical
versions: lessThan: 2.20.1-0ubuntu2.30+esm1
status: affected
version: 2.20.1
versionType: custom
lessThan: 2.20.9-0ubuntu7.24
status: affected
version: 2.20.9
versionType: custom
lessThan: 2.20.11-0ubuntu27.18
status: affected
version: 2.20.11-0ubuntu27
versionType: custom
lessThan: 2.20.11-0ubuntu50.7
status: affected
version: 2.20.11-0ubuntu50
versionType: custom
lessThan: 2.20.11-0ubuntu65.1
status: affected
version: 2.20.11-0ubuntu65
versionType: custom
lessThan: 2.14.1-0ubuntu3.29+esm7
status: affected
version: 2.14.1-0ubuntu3
versionType: custom
credits: value: maik@secfault-security.com (@fktio)
datePublic: 2021-05-25T00:00:00
descriptions: value: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
version: 3.1
problemTypes: descriptions: cweId: CWE-59
description: CWE-59 Improper Link Resolution Before File Access ('Link Following')
type: CWE
descriptions: cweId: CWE-61
description: CWE-61 UNIX Symbolic Link (Symlink) Following
type: CWE
source: advisory: https://ubuntu.com/security/notices/USN-4965-1
defect: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
discovery: EXTERNAL
title: apport read_file() function could follow maliciously constructed symbolic links
x_generator: engine: Vulnogram 0.0.9