Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: Canonical apport 2.14.1-0ubuntu3.29+esm7, 2.20.1-0ubuntu2.30+esm1 and 4 more versions Clear all filters
TI-2021-12231 CVE-2021-32557 · GHSA-ggh9-6q6m-3fh2

apport process_report() arbitrary file write

Priority LOW 31

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0039 Published 2021-06-12 Fixed in 2.20.1-0ubuntu2.30+esm1, 2.20.9-0ubuntu7.24 +4 CWE-59
TI-2021-12230 CVE-2021-32556 · GHSA-6hq6-w9x9-j77g

apport get_modified_conffiles() function command injection

Priority LOW 18

It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00333 Published 2021-06-12 Fixed in 2.20.1-0ubuntu2.30+esm1, 2.20.9-0ubuntu7.24 +4 CWE-78