2 matches found
CVE-2021-32555 apport read_file() function could follow maliciously constructed symbolic links
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users...
7.3CVSS7AI score0.00289EPSS
SaveExploits0References1
CVE-2021-32555
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users...
7.3CVSS6.7AI score0.00289EPSS
SaveExploits0References3
20