PT-2021-4687 · Canonical+1 · Apport+2

Maik Münch + 1 · Published 2021-09-14 · Updated 2022-10-27 · CVE-2021-3709

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions apport versions prior to 2.14.1-0ubuntu3.29+esm8 apport versions prior to 2.20.1-0ubuntu2.30+esm2 apport versions prior to 2.20.9-0ubuntu7.26 apport versions prior to 2.20.11-0ubuntu27.20 apport versions prior to 2.20.11-0ubuntu65.3

Description The issue is related to the check attachment for errors() function in the data/general-hooks/ubuntu.py file of the apport error registration service in the Ubuntu operating system. This function is associated with a potential information leak about files and directories. An attacker could exploit this issue by constructing a crash file to expose protected information.

Recommendations For apport versions prior to 2.14.1-0ubuntu3.29+esm8, update to version 2.14.1-0ubuntu3.29+esm8 or later. For apport versions prior to 2.20.1-0ubuntu2.30+esm2, update to version 2.20.1-0ubuntu2.30+esm2 or later. For apport versions prior to 2.20.9-0ubuntu7.26, update to version 2.20.9-0ubuntu7.26 or later. For apport versions prior to 2.20.11-0ubuntu27.20, update to version 2.20.11-0ubuntu27.20 or later. For apport versions prior to 2.20.11-0ubuntu65.3, update to version 2.20.11-0ubuntu65.3 or later.

Exploit

Fix

Path traversal

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-22

CWE-538

CWE-668

Related Identifiers

BDU:2021-05382

CVE-2021-3709

USN-5077-1

USN-5077-2

Affected Products

Linuxmint

Ubuntu

Apport

References · 14

• 🔥 https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1934308 · Exploit
• https://osv.dev/vulnerability/USN-5077-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5077-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3709 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-3709 · Security Note
• https://ubuntu.com/security/notices/USN-5077-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3709 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3709 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5077-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05382 · Security Note
• https://ubuntu.com/security/CVE-2021-3710 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3709 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3709?_ga=2.44362144.524579899.1631504916-997510329.1585215282 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3709 · Note