Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2021-07816 CVE-2021-25684 · GHSA-5wpx-42qp-2c7p

apport can be stalled by reading a FIFO

Priority LOW 39

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00568 Published 2021-06-11 Fixed in 2.20.1-0ubuntu2.30, 2.20.9-0ubuntu7.23 +2 CWE-20
TI-2021-07815 CVE-2021-25683 · GHSA-v5cq-cqrx-4rpr

apport improperly parses /proc/pid/stat

Priority LOW 38

It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00432 Published 2021-06-11 Fixed in 2.20.1-0ubuntu2.30, 2.20.9-0ubuntu7.23 +2 CWE-20
TI-2021-07814 CVE-2021-25682 · GHSA-7398-g2qh-pr9p

apport improperly parses /proc/pid/status

Priority LOW 38

It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00453 Published 2021-06-11 Fixed in 2.20.1-0ubuntu2.30, 2.20.9-0ubuntu7.23 +2 CWE-20