Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Canonical apport 2.14.1-0ubuntu3.29+esm8, 2.20.1-0ubuntu2.30+esm2 and 2 more versions Clear all filters
TI-2021-02644 CVE-2021-3710 · GHSA-f7hq-m55j-5752

Apport info disclosure via path traversal bug in read_file

Priority LOW 29

An information disclosure via path traversal was discovered in apport/hookutils.py function read_file().

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00463 Published 2021-10-01 Fixed in 2.14.1-0ubuntu3.29+esm8, 2.20.1-0ubuntu2.30+esm2 +2 CWE-24
TI-2021-02643 CVE-2021-3709 · GHSA-hq94-g33h-jj2x

Apport file permission bypass through emacs byte compilation errors

Priority LOW 29

Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00462 Published 2021-10-01 Fixed in 2.14.1-0ubuntu3.29+esm8, 2.20.1-0ubuntu2.30+esm2 +2 CWE-538