CVE-2021-32555

CVE-2021-32555 affects the Ubuntu Apport component. The read_file() function in apport/hookutils.py could follow symbolic links or open FIFOs when invoked by xorg-hwe-18.04 package apport hooks, potentially exposing private data to other local users. CVSS/metrics in public records indicate local ...

CVE-2021-32554 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users...

CVE-2021-32554

CVE-2021-32554 concerns Ubuntu Apport: read_file() in apport/hookutils.py could follow symbolic links or open FIFOs when invoked by xorg package apport hooks, exposing private data to other local users. Exploitation is described as a local information disclosure (vector involves reading private f...

CVE-2021-32553 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...

CVE-2021-32551 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users...

CVE-2021-32551

CVE-2021-32551 affects Ubuntu Apport: read_file() in apport/hookutils.py could follow symbolic links or open FIFOs, exposing private data to other local users when used by the openjdk-15 package apport hooks. The issue is tied to Apport’s information-gathering operations and is addressed in Ubunt...

CVE-2021-32552 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users...

CVE-2021-32552

CVE-2021-32552 affects Ubuntu Apport. The read_file() function in apport/hookutils.py can follow symbolic links or open FIFOs when used by the openjdk-16 package apport hooks, potentially exposing private data to other local users. This is a local confidentiality vulnerability; exploitation statu...

CVE-2021-32550 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

CVE-2021-32550

CVE-2021-32550 affects Ubuntu Apport: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs, enabling a local attacker to access private data via openjdk-14 package apport hooks. Public details identify the vulnerability as local in scope with partial confidentiality impact a...

CVE-2021-32548

The CVE-2021-32548 issue affects the Ubuntu Apport component: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs when invoked by the openjdk-8 package apport hooks, enabling a local attacker to view private data of other users. This matches the described impact of partial ...

CVE-2021-32549

CVE-2021-32549 affects the Ubuntu Apport read_file() in apport/hookutils.py, which could follow symbolic links or open FIFOs, exposing private data to local users when used by the openjdk-13 package apport hooks. Public sources describe impact as local, with partial or high confidentiality impact...

CVE-2021-32549 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users...

CVE-2021-32548 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport hooks, it could expose private data to other local users...

CVE-2021-32547 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users...

CVE-2021-32547

The CVE-2021-32547 entry concerns Ubuntu Apport: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs when used by the openjdk-lts package apport hooks, allowing a local attacker to access private data. Documents confirm the vulnerability affects Ubuntu’s Apport hooks and th...

CVE-2021-25682

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

CVE-2021-25682

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

CVE-2021-25683

It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...

CVE-2021-25684

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...