CVE-2021-32556

🗓️ 12 Jun 2021 03:40:42Reported by canonicalType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 145 Views

get_modified_conffiles() in backends/packaging-apt-dpkg.py allows package name injection, confusing dpkg(1) call

Reporter	Title	Published	Views	Family All 17
CNNVD	Ubuntu Apport 操作系统命令注入漏洞	26 May 202100:00	–	cnnvd
Cvelist	CVE-2021-32556 apport get_modified_conffiles() function command injection	12 Jun 202103:40	–	cvelist
EUVD	EUVD-2021-19401	7 Oct 202500:30	–	euvd
NVD	CVE-2021-32556	12 Jun 202104:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-4965-1)	26 May 202100:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-4965-2)	26 Aug 202200:00	–	openvas
OSV	UBUNTU-CVE-2021-32556	25 May 202100:00	–	osv
OSV	USN-4965-1 apport vulnerabilities	25 May 202116:52	–	osv
OSV	USN-4965-2 apport vulnerabilities	25 May 202118:20	–	osv
Prion	Design/Logic Flaw	12 Jun 202104:15	–	prion

NVD

Node

canonical apportRange2.14.1-0ubuntu3–2.14.1-0ubuntu3.29+esm7

canonical apportRange2.20.1–2.20.1-0ubuntu2.30+esm1

canonical apportRange2.20.9–2.20.9-0ubuntu7.24

canonical apportRange2.20.11-0ubuntu27–2.20.11-0ubuntu27.18

canonical apportRange2.20.11-0ubuntu50–2.20.11-0ubuntu50.7

canonical apportRange2.20.11-0ubuntu65–2.20.11-0ubuntu65.1

[
  {
    "product": "apport",
    "vendor": "Canonical",
    "versions": [
      {
        "lessThan": "2.20.1-0ubuntu2.30+esm1",
        "status": "affected",
        "version": "2.20.1",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.9-0ubuntu7.24",
        "status": "affected",
        "version": "2.20.9",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.11-0ubuntu27.18",
        "status": "affected",
        "version": "2.20.11-0ubuntu27",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.11-0ubuntu50.7",
        "status": "affected",
        "version": "2.20.11-0ubuntu50",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.11-0ubuntu65.1",
        "status": "affected",
        "version": "2.20.11-0ubuntu65",
        "versionType": "custom"
      },
      {
        "lessThan": "2.14.1-0ubuntu3.29+esm7",
        "status": "affected",
        "version": "2.14.1-0ubuntu3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bugs	www.bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904

21 Nov 2024 06:07Current

4.7Medium risk

Vulners AI Score4.7

CVSS 22.1

CVSS 3.13.3 - 3.8

EPSS0.00093

CWE-78