CVE-2021-32557

🗓️ 12 Jun 2021 03:40:43Reported by canonicalType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 146 Views

Arbitrary file writes via symlinks in process_report() function

Reporter	Title	Published	Views	Family All 18
CNNVD	Ubuntu Apport 后置链接漏洞	26 May 202100:00	–	cnnvd
Cvelist	CVE-2021-32557 apport process_report() arbitrary file write	12 Jun 202103:40	–	cvelist
EUVD	EUVD-2021-19402	7 Oct 202500:30	–	euvd
NVD	CVE-2021-32557	12 Jun 202104:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-4965-1)	26 May 202100:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-4965-2)	26 Aug 202200:00	–	openvas
OSV	CVE-2021-32557	12 Jun 202104:15	–	osv
OSV	UBUNTU-CVE-2021-32557	25 May 202100:00	–	osv
OSV	USN-4965-1 apport vulnerabilities	25 May 202116:52	–	osv
OSV	USN-4965-2 apport vulnerabilities	25 May 202118:20	–	osv

NVD

Node

canonical apportRange2.14.1-0ubuntu3–2.14.1-0ubuntu3.29+esm7

canonical apportRange2.20.1–2.20.1-0ubuntu2.30+esm1

canonical apportRange2.20.9–2.20.9-0ubuntu7.24

canonical apportRange2.20.11-0ubuntu27–2.20.11-0ubuntu27.18

canonical apportRange2.20.11-0ubuntu50–2.20.11-0ubuntu50.7

canonical apportRange2.20.11-0ubuntu65–2.20.11-0ubuntu65.1

[
  {
    "product": "apport",
    "vendor": "Canonical",
    "versions": [
      {
        "lessThan": "2.20.1-0ubuntu2.30+esm1",
        "status": "affected",
        "version": "2.20.1",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.9-0ubuntu7.24",
        "status": "affected",
        "version": "2.20.9",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.11-0ubuntu27.18",
        "status": "affected",
        "version": "2.20.11-0ubuntu27",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.11-0ubuntu50.7",
        "status": "affected",
        "version": "2.20.11-0ubuntu50",
        "versionType": "custom"
      },
      {
        "lessThan": "2.20.11-0ubuntu65.1",
        "status": "affected",
        "version": "2.20.11-0ubuntu65",
        "versionType": "custom"
      },
      {
        "lessThan": "2.14.1-0ubuntu3.29+esm7",
        "status": "affected",
        "version": "2.14.1-0ubuntu3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bugs	www.bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904

21 Nov 2024 06:07Current

5.9Medium risk

Vulners AI Score5.9

CVSS 23.6

CVSS 3.15.2 - 7.1

EPSS0.00058