Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2021-10-01T02:35:21.228849Z

Updated: 2024-09-16T23:31:13.094Z

Reserved: 2021-08-16T00:00:00

Link: CVE-2021-3709

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2021-10-01T03:15:06.983

Modified: 2022-10-27T13:02:58.307

Link: CVE-2021-3709

cve-icon Redhat

No data.