Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-3709

Опубликовано: 01 окт. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 2.1
CVSS3: 6.5

Описание

Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;

РелизСтатусПримечание
bionic

released

2.20.9-0ubuntu7.26
devel

released

2.20.11-0ubuntu69
esm-infra-legacy/trusty

released

2.14.1-0ubuntu3.29+esm8
esm-infra/bionic

released

2.20.9-0ubuntu7.26
esm-infra/focal

released

2.20.11-0ubuntu27.20
esm-infra/xenial

released

2.20.1-0ubuntu2.30+esm2
focal

released

2.20.11-0ubuntu27.20
hirsute

released

2.20.11-0ubuntu65.3
impish

released

2.20.11-0ubuntu69
jammy

released

2.20.11-0ubuntu69

Показывать по

EPSS

Процентиль: 22%
0.00071
Низкий

2.1 Low

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;

CVSS3: 5.5
github
больше 3 лет назад

Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость функции check_attachment_for_errors (файла data/general-hooks/ubuntu.py) службы регистрации ошибок apport операционной системы Ubuntu, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 22%
0.00071
Низкий

2.1 Low

CVSS2

6.5 Medium

CVSS3