700 matches found
CVE-2021-32551
CVE-2021-32551 affects Ubuntu Apport: read_file() in apport/hookutils.py could follow symbolic links or open FIFOs, exposing private data to other local users when used by the openjdk-15 package apport hooks. The issue is tied to Apport’s information-gathering operations and is addressed in Ubunt...
CVE-2021-32552 apport read_file() function could follow maliciously constructed symbolic links
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users...
CVE-2021-32552
CVE-2021-32552 affects Ubuntu Apport. The read_file() function in apport/hookutils.py can follow symbolic links or open FIFOs when used by the openjdk-16 package apport hooks, potentially exposing private data to other local users. This is a local confidentiality vulnerability; exploitation statu...
CVE-2021-32550 apport read_file() function could follow maliciously constructed symbolic links
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...
CVE-2021-32550
CVE-2021-32550 affects Ubuntu Apport: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs, enabling a local attacker to access private data via openjdk-14 package apport hooks. Public details identify the vulnerability as local in scope with partial confidentiality impact a...
CVE-2021-32548
The CVE-2021-32548 issue affects the Ubuntu Apport component: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs when invoked by the openjdk-8 package apport hooks, enabling a local attacker to view private data of other users. This matches the described impact of partial ...
CVE-2021-32549
CVE-2021-32549 affects the Ubuntu Apport read_file() in apport/hookutils.py, which could follow symbolic links or open FIFOs, exposing private data to local users when used by the openjdk-13 package apport hooks. Public sources describe impact as local, with partial or high confidentiality impact...
CVE-2021-32549 apport read_file() function could follow maliciously constructed symbolic links
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users...
CVE-2021-32548 apport read_file() function could follow maliciously constructed symbolic links
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport hooks, it could expose private data to other local users...
CVE-2021-32547 apport read_file() function could follow maliciously constructed symbolic links
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users...
CVE-2021-32547
The CVE-2021-32547 entry concerns Ubuntu Apport: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs when used by the openjdk-lts package apport hooks, allowing a local attacker to access private data. Documents confirm the vulnerability affects Ubuntu’s Apport hooks and th...
CVE-2021-25682
It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...
CVE-2021-25683
It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...
CVE-2021-25682
It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...
CVE-2021-25684
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
CVE-2021-25684
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
Design/Logic Flaw
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
CVE-2021-25684 apport can be stalled by reading a FIFO
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
CVE-2021-25684
CVE-2021-25684 affects the Apport component (data/apport) and describes a flaw where it did not properly open a report file, enabling hanging reads on a FIFO. The consequence is local denial of service (hanging reads), with Ubuntu advisories (USN-4720-1/2) documenting fixes for Apport vulnerabili...