CVEvulnerability

CVE-2021-3710

5.5 MEDIUM Published 2021-10-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-10-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
Weaknesses
CWE-22, CWE-24

Description

An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;

Affected configurations

• canonical apport 2.14.1-0ubuntu1 • canonical apport 2.14.1-0ubuntu2 • canonical apport 2.14.1-0ubuntu3 • canonical apport 2.14.1-0ubuntu3.1 • canonical apport 2.14.1-0ubuntu3.2 • canonical apport 2.14.1-0ubuntu3.3 • canonical apport 2.14.1-0ubuntu3.4 • canonical apport 2.14.1-0ubuntu3.5 • canonical apport 2.14.1-0ubuntu3.6 • canonical apport 2.14.1-0ubuntu3.7 • canonical apport 2.14.1-0ubuntu3.8 • canonical apport 2.14.1-0ubuntu3.9 • canonical apport 2.14.1-0ubuntu3.10 • canonical apport 2.14.1-0ubuntu3.11 • canonical apport 2.14.1-0ubuntu3.12 • canonical apport 2.14.1-0ubuntu3.13 • canonical apport 2.14.1-0ubuntu3.14 • canonical apport 2.14.1-0ubuntu3.15 • canonical apport 2.14.1-0ubuntu3.16 • canonical apport 2.14.1-0ubuntu3.17 • canonical apport 2.14.1-0ubuntu3.18 • canonical apport 2.14.1-0ubuntu3.19 • canonical apport 2.14.1-0ubuntu3.20 • canonical apport 2.14.1-0ubuntu3.21 • canonical apport 2.14.1-0ubuntu3.23 • canonical apport 2.14.1-0ubuntu3.24 • canonical apport 2.14.1-0ubuntu3.25 • canonical apport 2.14.1-0ubuntu3.27 • canonical apport 2.14.1-0ubuntu3.28 • canonical apport 2.14.1-0ubuntu3.29 • canonical apport 2.14.1-0ubuntu3.29\+esm7 • canonical apport 2.20.1-0ubuntu1 • canonical apport 2.20.1-0ubuntu2 • canonical apport 2.20.1-0ubuntu2.1 • canonical apport 2.20.1-0ubuntu2.2 • canonical apport 2.20.1-0ubuntu2.4 • canonical apport 2.20.1-0ubuntu2.5 • canonical apport 2.20.1-0ubuntu2.6 • canonical apport 2.20.1-0ubuntu2.7 • canonical apport 2.20.1-0ubuntu2.8 • canonical apport 2.20.1-0ubuntu2.9 • canonical apport 2.20.1-0ubuntu2.10 • canonical apport 2.20.1-0ubuntu2.12 • canonical apport 2.20.1-0ubuntu2.13 • canonical apport 2.20.1-0ubuntu2.14 • canonical apport 2.20.1-0ubuntu2.15 • canonical apport 2.20.1-0ubuntu2.16 • canonical apport 2.20.1-0ubuntu2.17 • canonical apport 2.20.1-0ubuntu2.18 • canonical apport 2.20.1-0ubuntu2.19 • canonical apport 2.20.1-0ubuntu2.20 • canonical apport 2.20.1-0ubuntu2.21 • canonical apport 2.20.1-0ubuntu2.22 • canonical apport 2.20.1-0ubuntu2.23 • canonical apport 2.20.1-0ubuntu2.25 • canonical apport 2.20.1-0ubuntu2.26 • canonical apport 2.20.1-0ubuntu2.27 • canonical apport 2.20.1-0ubuntu2.28 • canonical apport 2.20.1-0ubuntu2.30 • canonical apport 2.20.1-0ubuntu2.30\+esm1 … and 110 more

Related

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-24 Path Traversal: '../filedir' weakness

References