Lucene search
HistoryOct 01, 2021 - 3:15 a.m.
CVE-2021-3709
apport versions
crafted crash file
data exposure
cve-2021-3709
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
32.8%
Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
Affected configurations
Node
canonicalubuntu_linuxMatch14.04esm
canonicalapportMatch2.14.1-0ubuntu1
ORcanonicalapportMatch2.14.1-0ubuntu2
ORcanonicalapportMatch2.14.1-0ubuntu3
ORcanonicalapportMatch2.14.1-0ubuntu3.1
ORcanonicalapportMatch2.14.1-0ubuntu3.2
ORcanonicalapportMatch2.14.1-0ubuntu3.3
ORcanonicalapportMatch2.14.1-0ubuntu3.4
ORcanonicalapportMatch2.14.1-0ubuntu3.5
ORcanonicalapportMatch2.14.1-0ubuntu3.6
ORcanonicalapportMatch2.14.1-0ubuntu3.7
ORcanonicalapportMatch2.14.1-0ubuntu3.8
ORcanonicalapportMatch2.14.1-0ubuntu3.9
ORcanonicalapportMatch2.14.1-0ubuntu3.10
ORcanonicalapportMatch2.14.1-0ubuntu3.11
ORcanonicalapportMatch2.14.1-0ubuntu3.12
ORcanonicalapportMatch2.14.1-0ubuntu3.13
ORcanonicalapportMatch2.14.1-0ubuntu3.14
ORcanonicalapportMatch2.14.1-0ubuntu3.15
ORcanonicalapportMatch2.14.1-0ubuntu3.16
ORcanonicalapportMatch2.14.1-0ubuntu3.17
ORcanonicalapportMatch2.14.1-0ubuntu3.18
ORcanonicalapportMatch2.14.1-0ubuntu3.19
ORcanonicalapportMatch2.14.1-0ubuntu3.20
ORcanonicalapportMatch2.14.1-0ubuntu3.21
ORcanonicalapportMatch2.14.1-0ubuntu3.23
ORcanonicalapportMatch2.14.1-0ubuntu3.24
ORcanonicalapportMatch2.14.1-0ubuntu3.25
ORcanonicalapportMatch2.14.1-0ubuntu3.27
ORcanonicalapportMatch2.14.1-0ubuntu3.28
ORcanonicalapportMatch2.14.1-0ubuntu3.29
ORcanonicalapportMatch2.14.1-0ubuntu3.29\+esm7
Node
canonicalubuntu_linuxMatch16.04
canonicalapportMatch2.20.1-0ubuntu1
ORcanonicalapportMatch2.20.1-0ubuntu2
ORcanonicalapportMatch2.20.1-0ubuntu2.1
ORcanonicalapportMatch2.20.1-0ubuntu2.2
ORcanonicalapportMatch2.20.1-0ubuntu2.4
ORcanonicalapportMatch2.20.1-0ubuntu2.5
ORcanonicalapportMatch2.20.1-0ubuntu2.6
ORcanonicalapportMatch2.20.1-0ubuntu2.7
ORcanonicalapportMatch2.20.1-0ubuntu2.8
ORcanonicalapportMatch2.20.1-0ubuntu2.9
ORcanonicalapportMatch2.20.1-0ubuntu2.10
ORcanonicalapportMatch2.20.1-0ubuntu2.12
ORcanonicalapportMatch2.20.1-0ubuntu2.13
ORcanonicalapportMatch2.20.1-0ubuntu2.14
ORcanonicalapportMatch2.20.1-0ubuntu2.15
ORcanonicalapportMatch2.20.1-0ubuntu2.16
ORcanonicalapportMatch2.20.1-0ubuntu2.17
ORcanonicalapportMatch2.20.1-0ubuntu2.18
ORcanonicalapportMatch2.20.1-0ubuntu2.19
ORcanonicalapportMatch2.20.1-0ubuntu2.20
ORcanonicalapportMatch2.20.1-0ubuntu2.21
ORcanonicalapportMatch2.20.1-0ubuntu2.22
ORcanonicalapportMatch2.20.1-0ubuntu2.23
ORcanonicalapportMatch2.20.1-0ubuntu2.25
ORcanonicalapportMatch2.20.1-0ubuntu2.26
ORcanonicalapportMatch2.20.1-0ubuntu2.27
ORcanonicalapportMatch2.20.1-0ubuntu2.28
ORcanonicalapportMatch2.20.1-0ubuntu2.30
ORcanonicalapportMatch2.20.1-0ubuntu2.30\+esm1
Node
canonicalubuntu_linuxMatch18.04
canonicalapportMatch2.20.9-0ubuntu1
ORcanonicalapportMatch2.20.9-0ubuntu2
ORcanonicalapportMatch2.20.9-0ubuntu3
ORcanonicalapportMatch2.20.9-0ubuntu4
ORcanonicalapportMatch2.20.9-0ubuntu5
ORcanonicalapportMatch2.20.9-0ubuntu6
ORcanonicalapportMatch2.20.9-0ubuntu7
ORcanonicalapportMatch2.20.9-0ubuntu7.1
ORcanonicalapportMatch2.20.9-0ubuntu7.2
ORcanonicalapportMatch2.20.9-0ubuntu7.3
ORcanonicalapportMatch2.20.9-0ubuntu7.4
ORcanonicalapportMatch2.20.9-0ubuntu7.5
ORcanonicalapportMatch2.20.9-0ubuntu7.6
ORcanonicalapportMatch2.20.9-0ubuntu7.7
ORcanonicalapportMatch2.20.9-0ubuntu7.8
ORcanonicalapportMatch2.20.9-0ubuntu7.9
ORcanonicalapportMatch2.20.9-0ubuntu7.10
ORcanonicalapportMatch2.20.9-0ubuntu7.11
ORcanonicalapportMatch2.20.9-0ubuntu7.12
ORcanonicalapportMatch2.20.9-0ubuntu7.13
ORcanonicalapportMatch2.20.9-0ubuntu7.14
ORcanonicalapportMatch2.20.9-0ubuntu7.15
ORcanonicalapportMatch2.20.9-0ubuntu7.16
ORcanonicalapportMatch2.20.9-0ubuntu7.17
ORcanonicalapportMatch2.20.9-0ubuntu7.18
ORcanonicalapportMatch2.20.9-0ubuntu7.19
ORcanonicalapportMatch2.20.9-0ubuntu7.20
ORcanonicalapportMatch2.20.9-0ubuntu7.21
ORcanonicalapportMatch2.20.9-0ubuntu7.23
ORcanonicalapportMatch2.20.9-0ubuntu7.24
Node
canonicalubuntu_linuxMatch20.04
canonicalapportMatch2.20.11-0ubuntu8
ORcanonicalapportMatch2.20.11-0ubuntu9
ORcanonicalapportMatch2.20.11-0ubuntu10
ORcanonicalapportMatch2.20.11-0ubuntu11
ORcanonicalapportMatch2.20.11-0ubuntu12
ORcanonicalapportMatch2.20.11-0ubuntu13
ORcanonicalapportMatch2.20.11-0ubuntu14
ORcanonicalapportMatch2.20.11-0ubuntu15
ORcanonicalapportMatch2.20.11-0ubuntu16
ORcanonicalapportMatch2.20.11-0ubuntu17
ORcanonicalapportMatch2.20.11-0ubuntu18
ORcanonicalapportMatch2.20.11-0ubuntu19
ORcanonicalapportMatch2.20.11-0ubuntu20
ORcanonicalapportMatch2.20.11-0ubuntu21
ORcanonicalapportMatch2.20.11-0ubuntu22
ORcanonicalapportMatch2.20.11-0ubuntu23
ORcanonicalapportMatch2.20.11-0ubuntu24
ORcanonicalapportMatch2.20.11-0ubuntu25
ORcanonicalapportMatch2.20.11-0ubuntu26
ORcanonicalapportMatch2.20.11-0ubuntu27
ORcanonicalapportMatch2.20.11-0ubuntu27.2
ORcanonicalapportMatch2.20.11-0ubuntu27.3
ORcanonicalapportMatch2.20.11-0ubuntu27.4
ORcanonicalapportMatch2.20.11-0ubuntu27.5
ORcanonicalapportMatch2.20.11-0ubuntu27.6
ORcanonicalapportMatch2.20.11-0ubuntu27.7
ORcanonicalapportMatch2.20.11-0ubuntu27.8
ORcanonicalapportMatch2.20.11-0ubuntu27.9
ORcanonicalapportMatch2.20.11-0ubuntu27.10
ORcanonicalapportMatch2.20.11-0ubuntu27.11
ORcanonicalapportMatch2.20.11-0ubuntu27.12
ORcanonicalapportMatch2.20.11-0ubuntu27.13
ORcanonicalapportMatch2.20.11-0ubuntu27.14
ORcanonicalapportMatch2.20.11-0ubuntu27.16
ORcanonicalapportMatch2.20.11-0ubuntu27.17
ORcanonicalapportMatch2.20.11-0ubuntu27.18
Node
canonicalubuntu_linuxMatch21.04
canonicalapportMatch2.20.11-0ubuntu28
ORcanonicalapportMatch2.20.11-0ubuntu29
ORcanonicalapportMatch2.20.11-0ubuntu30
ORcanonicalapportMatch2.20.11-0ubuntu31
ORcanonicalapportMatch2.20.11-0ubuntu32
ORcanonicalapportMatch2.20.11-0ubuntu33
ORcanonicalapportMatch2.20.11-0ubuntu34
ORcanonicalapportMatch2.20.11-0ubuntu35
ORcanonicalapportMatch2.20.11-0ubuntu36
ORcanonicalapportMatch2.20.11-0ubuntu37
ORcanonicalapportMatch2.20.11-0ubuntu38
ORcanonicalapportMatch2.20.11-0ubuntu39
ORcanonicalapportMatch2.20.11-0ubuntu40
ORcanonicalapportMatch2.20.11-0ubuntu41
ORcanonicalapportMatch2.20.11-0ubuntu42
ORcanonicalapportMatch2.20.11-0ubuntu43
ORcanonicalapportMatch2.20.11-0ubuntu44
ORcanonicalapportMatch2.20.11-0ubuntu45
ORcanonicalapportMatch2.20.11-0ubuntu46
ORcanonicalapportMatch2.20.11-0ubuntu47
ORcanonicalapportMatch2.20.11-0ubuntu48
ORcanonicalapportMatch2.20.11-0ubuntu49
ORcanonicalapportMatch2.20.11-0ubuntu50
ORcanonicalapportMatch2.20.11-0ubuntu50.1
ORcanonicalapportMatch2.20.11-0ubuntu50.2
ORcanonicalapportMatch2.20.11-0ubuntu50.3
ORcanonicalapportMatch2.20.11-0ubuntu50.5
ORcanonicalapportMatch2.20.11-0ubuntu50.7
ORcanonicalapportMatch2.20.11-0ubuntu51
ORcanonicalapportMatch2.20.11-0ubuntu52
ORcanonicalapportMatch2.20.11-0ubuntu53
ORcanonicalapportMatch2.20.11-0ubuntu54
ORcanonicalapportMatch2.20.11-0ubuntu55
ORcanonicalapportMatch2.20.11-0ubuntu56
ORcanonicalapportMatch2.20.11-0ubuntu57
ORcanonicalapportMatch2.20.11-0ubuntu58
ORcanonicalapportMatch2.20.11-0ubuntu59
ORcanonicalapportMatch2.20.11-0ubuntu60
ORcanonicalapportMatch2.20.11-0ubuntu61
ORcanonicalapportMatch2.20.11-0ubuntu62
ORcanonicalapportMatch2.20.11-0ubuntu63
ORcanonicalapportMatch2.20.11-0ubuntu64
ORcanonicalapportMatch2.20.11-0ubuntu65
ORcanonicalapportMatch2.20.11-0ubuntu65.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| canonical | ubuntu_linux | 14.04 | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| canonical | apport | 2.14.1-0ubuntu1 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu1:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu2 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu2:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.1 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.1:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.2 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.2:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.3 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.3:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.4 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.4:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.5 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.5:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.6 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.6:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2021-3709
2021-09-14 00:00:00
prion
prion
Design/Logic Flaw
2021-10-01 03:15:00
cvelist
cvelist
cve
cve
CVE-2021-3709
2021-10-01 03:15:06
openvas
openvas
Ubuntu: Security Advisory (USN-5077-1)
2021-09-15 00:00:00
Ubuntu: Security Advisory (USN-5077-2)
2022-08-26 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : Apport vulnerabilities (USN-5077-2)
2021-09-14 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Apport vulnerabilities (USN-5077-1)
2021-09-14 00:00:00
osv
osv
apport vulnerabilities
2021-09-14 13:21:29
apport vulnerabilities
2021-09-14 11:54:26
ubuntu
ubuntu
Apport vulnerabilities
2021-09-14 00:00:00
Apport vulnerabilities
2021-09-14 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
32.8%
Related for NVD:CVE-2021-3709