PT-2021-4679 · Canonical+1 · Apport+2

Maik Münch + 1 · Published 2021-09-14 · Updated 2021-10-08 · CVE-2021-3710

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions apport versions prior to 2.14.1-0ubuntu3.29+esm8 apport versions prior to 2.20.1-0ubuntu2.30+esm2 apport versions prior to 2.20.9-0ubuntu7.26 apport versions prior to 2.20.11-0ubuntu27.20 apport versions prior to 2.20.11-0ubuntu65.3

Description The issue is related to the read file function in the apport error registration service, which is associated with incorrect restriction of the path name to a directory with limited access. This can allow an attacker to disclose protected information via path traversal. The read file function in apport/hookutils.py is specifically affected.

Recommendations For apport versions prior to 2.14.1-0ubuntu3.29+esm8, update to version 2.14.1-0ubuntu3.29+esm8 or later. For apport versions prior to 2.20.1-0ubuntu2.30+esm2, update to version 2.20.1-0ubuntu2.30+esm2 or later. For apport versions prior to 2.20.9-0ubuntu7.26, update to version 2.20.9-0ubuntu7.26 or later. For apport versions prior to 2.20.11-0ubuntu27.20, update to version 2.20.11-0ubuntu27.20 or later. For apport versions prior to 2.20.11-0ubuntu65.3, update to version 2.20.11-0ubuntu65.3 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-24

Related Identifiers

BDU:2021-05372

CVE-2021-3710

USN-5077-1

USN-5077-2

Affected Products

Linuxmint

Ubuntu

Apport

References · 13

• 🔥 https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1933832 · Exploit
• https://osv.dev/vulnerability/USN-5077-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5077-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3710 · Security Note
• https://ubuntu.com/security/notices/USN-5077-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3709 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05372 · Security Note
• https://osv.dev/vulnerability/USN-5077-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3710 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3710 · Security Note
• https://osv.dev/vulnerability/CVE-2021-3710 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3710 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3710 · Note