850 matches found
CVE-2021-32555: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users...
CVE-2021-32548: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport hooks, it could expose private data to other local users...
CVE-2021-32552: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users...
CVE-2021-32553: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...
CVE-2021-32551: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users...
CVE-2021-32550: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...
CVE-2021-32549: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users...
CVE-2021-32547: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users...
CVE-2021-32554: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users...
CVE-2021-25682
It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...
CVE-2021-25683
It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...
CVE-2021-25682
It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...
CVE-2021-25684
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
CVE-2021-25684
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
Design/Logic Flaw
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
CVE-2021-25684 apport can be stalled by reading a FIFO
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
CVE-2021-25684
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...
CVE-2021-25684
CVE-2021-25684 affects the Apport component (data/apport) and describes a flaw where it did not properly open a report file, enabling hanging reads on a FIFO. The consequence is local denial of service (hanging reads), with Ubuntu advisories (USN-4720-1/2) documenting fixes for Apport vulnerabili...
CVE-2021-25683 apport improperly parses /proc/pid/stat
It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...
CVE-2021-25683
The CVE-2021-25683 issue affects the Ubuntu Apport component (data/apport). It arises from the get_starttime() function failing to correctly parse /proc/pid/stat, allowing a local attacker to escalate privileges and execute arbitrary code. The vulnerability is classified as HIGH severity (local a...