CVE-2021-32557 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.2 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
canonical	CNA	5.2 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 18%

Vendor	Product	Version
canonical	apport	2.14.1-0ubuntu3 ≤ 𝑥 < 2.14.1-0ubuntu3.29\+esm7
canonical	apport	2.20.1 ≤ 𝑥 < 2.20.1-0ubuntu2.30\+esm1
canonical	apport	2.20.9 ≤ 𝑥 < 2.20.9-0ubuntu7.24
canonical	apport	2.20.11-0ubuntu27 ≤ 𝑥 < 2.20.11-0ubuntu27.18
canonical	apport	2.20.11-0ubuntu50 ≤ 𝑥 < 2.20.11-0ubuntu50.7
canonical	apport	2.20.11-0ubuntu65 ≤ 𝑥 < 2.20.11-0ubuntu65.1

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

apport

jammy	Fixed 2.20.11-0ubuntu67 released
impish	Fixed 2.20.11-0ubuntu67 released
hirsute	Fixed 2.20.11-0ubuntu65.1 released
groovy	Fixed 2.20.11-0ubuntu50.7 released
focal	Fixed 2.20.11-0ubuntu27.18 released
bionic	Fixed 2.20.9-0ubuntu7.24 released
xenial	Fixed 2.20.1-0ubuntu2.30+esm1 released
trusty	Fixed 2.14.1-0ubuntu3.29+esm7 released

Known Exploits!

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904