Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
Advisories
Source ID Title
EUVD EUVD EUVD-2021-26992 Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
Ubuntu USN Ubuntu USN USN-5077-1 Apport vulnerabilities
Ubuntu USN Ubuntu USN USN-5077-2 Apport vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: canonical

Published:

Updated: 2024-09-16T23:31:13.094Z

Reserved: 2021-08-16T00:00:00

Link: CVE-2021-3709

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-10-01T03:15:06.983

Modified: 2024-11-21T06:22:12.517

Link: CVE-2021-3709

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.