PT-2021-19779 · Linux Mint+1 · Linuxmint+1

Maik + 1 · Published 2021-05-25 · Updated 2021-06-23 · CVE-2021-32556

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided.

Description A issue was found in the get modified conffiles() function, located in backends/packaging-apt-dpkg.py, which allowed the injection of modified package names. This could potentially confuse the dpkg(1) call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-32556

USN-4965-1

USN-4965-2

Affected Products

Linuxmint

Ubuntu

References · 20

• https://ubuntu.com/security/notices/USN-4965-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32553 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4965-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32551 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32548 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32556 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4965-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32556 · Vendor Advisory
• https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32550 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32557 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32547 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32556 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32554 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32555 · Vendor Advisory