Canonical Apport 2.14.1-0ubuntu3.6

CPE Details

Canonical Apport 2.14.1-0ubuntu3.6
canonical
apport
2.14.1-0ubuntu3.6
2021-10-07
13h51 +00:00
2021-10-07
13h57 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.6:*:*:*:*:*:*:*

Informations

Vendor

canonical

Product

apport

Version

2.14.1-0ubuntu3.6

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-1326 2023-04-13 22h35 +00:00 A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
7.8
Haute
CVE-2021-3710 2021-10-01 02h35 +00:00 An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
6.5
Moyen
CVE-2021-3709 2021-10-01 02h35 +00:00 Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
6.5
Moyen
CVE-2021-32557 2021-06-12 03h40 +00:00 It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.
7.1
Haute
CVE-2021-32556 2021-06-12 03h40 +00:00 It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.
3.8
Bas
CVE-2015-1341 2019-04-22 15h35 +00:00 Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.
7.8
Haute