CVE-2021-32554
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
apport read_file() function could follow maliciously constructed symbolic links
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
apport
- Vendor
- Canonical
- Product
- apport
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.20.1 | affected | custom | 2.20.1-0ubuntu2.30+esm1 | Unavailable | None listed |
| 2.20.9 | affected | custom | 2.20.9-0ubuntu7.24 | Unavailable | None listed |
| 2.20.11-0ubuntu27 | affected | custom | 2.20.11-0ubuntu27.18 | Unavailable | None listed |
| 2.20.11-0ubuntu50 | affected | custom | 2.20.11-0ubuntu50.7 | Unavailable | None listed |
| 2.20.11-0ubuntu65 | affected | custom | 2.20.11-0ubuntu65.1 | Unavailable | None listed |
| 2.14.1-0ubuntu3 | affected | custom | 2.14.1-0ubuntu3.29+esm7 | Unavailable | None listed |