Lucene search
CanonicalCVE-2021-3710HistoryOct 01, 2021 - 3:15 a.m.
CVE-2021-3710
2021-10-0103:15:07
CWE-22
CWE-24
canonical
web.nvd.nist.gov
43
cve-2021-3710
information disclosure
path traversal
apport
security issue
nvd
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
27.8%
An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
Affected configurations
Node
canonicalubuntu_linuxMatch14.04
canonicalapportMatch2.14.1-0ubuntu1
ORcanonicalapportMatch2.14.1-0ubuntu2
ORcanonicalapportMatch2.14.1-0ubuntu3
ORcanonicalapportMatch2.14.1-0ubuntu3.1
ORcanonicalapportMatch2.14.1-0ubuntu3.2
ORcanonicalapportMatch2.14.1-0ubuntu3.3
ORcanonicalapportMatch2.14.1-0ubuntu3.4
ORcanonicalapportMatch2.14.1-0ubuntu3.5
ORcanonicalapportMatch2.14.1-0ubuntu3.6
ORcanonicalapportMatch2.14.1-0ubuntu3.7
ORcanonicalapportMatch2.14.1-0ubuntu3.8
ORcanonicalapportMatch2.14.1-0ubuntu3.9
ORcanonicalapportMatch2.14.1-0ubuntu3.10
ORcanonicalapportMatch2.14.1-0ubuntu3.11
ORcanonicalapportMatch2.14.1-0ubuntu3.12
ORcanonicalapportMatch2.14.1-0ubuntu3.13
ORcanonicalapportMatch2.14.1-0ubuntu3.14
ORcanonicalapportMatch2.14.1-0ubuntu3.15
ORcanonicalapportMatch2.14.1-0ubuntu3.16
ORcanonicalapportMatch2.14.1-0ubuntu3.17
ORcanonicalapportMatch2.14.1-0ubuntu3.18
ORcanonicalapportMatch2.14.1-0ubuntu3.19
ORcanonicalapportMatch2.14.1-0ubuntu3.20
ORcanonicalapportMatch2.14.1-0ubuntu3.21
ORcanonicalapportMatch2.14.1-0ubuntu3.23
ORcanonicalapportMatch2.14.1-0ubuntu3.24
ORcanonicalapportMatch2.14.1-0ubuntu3.25
ORcanonicalapportMatch2.14.1-0ubuntu3.27
ORcanonicalapportMatch2.14.1-0ubuntu3.28
ORcanonicalapportMatch2.14.1-0ubuntu3.29
ORcanonicalapportMatch2.14.1-0ubuntu3.29\+esm7
Node
canonicalubuntu_linuxMatch16.04
canonicalapportMatch2.20.1-0ubuntu1
ORcanonicalapportMatch2.20.1-0ubuntu2
ORcanonicalapportMatch2.20.1-0ubuntu2.1
ORcanonicalapportMatch2.20.1-0ubuntu2.2
ORcanonicalapportMatch2.20.1-0ubuntu2.4
ORcanonicalapportMatch2.20.1-0ubuntu2.5
ORcanonicalapportMatch2.20.1-0ubuntu2.6
ORcanonicalapportMatch2.20.1-0ubuntu2.7
ORcanonicalapportMatch2.20.1-0ubuntu2.8
ORcanonicalapportMatch2.20.1-0ubuntu2.9
ORcanonicalapportMatch2.20.1-0ubuntu2.10
ORcanonicalapportMatch2.20.1-0ubuntu2.12
ORcanonicalapportMatch2.20.1-0ubuntu2.13
ORcanonicalapportMatch2.20.1-0ubuntu2.14
ORcanonicalapportMatch2.20.1-0ubuntu2.15
ORcanonicalapportMatch2.20.1-0ubuntu2.16
ORcanonicalapportMatch2.20.1-0ubuntu2.17
ORcanonicalapportMatch2.20.1-0ubuntu2.18
ORcanonicalapportMatch2.20.1-0ubuntu2.19
ORcanonicalapportMatch2.20.1-0ubuntu2.20
ORcanonicalapportMatch2.20.1-0ubuntu2.21
ORcanonicalapportMatch2.20.1-0ubuntu2.22
ORcanonicalapportMatch2.20.1-0ubuntu2.23
ORcanonicalapportMatch2.20.1-0ubuntu2.25
ORcanonicalapportMatch2.20.1-0ubuntu2.26
ORcanonicalapportMatch2.20.1-0ubuntu2.27
ORcanonicalapportMatch2.20.1-0ubuntu2.28
ORcanonicalapportMatch2.20.1-0ubuntu2.30
ORcanonicalapportMatch2.20.1-0ubuntu2.30\+esm1
Node
canonicalubuntu_linuxMatch18.04
canonicalapportMatch2.20.9-0ubuntu1
ORcanonicalapportMatch2.20.9-0ubuntu2
ORcanonicalapportMatch2.20.9-0ubuntu3
ORcanonicalapportMatch2.20.9-0ubuntu4
ORcanonicalapportMatch2.20.9-0ubuntu5
ORcanonicalapportMatch2.20.9-0ubuntu6
ORcanonicalapportMatch2.20.9-0ubuntu7
ORcanonicalapportMatch2.20.9-0ubuntu7.1
ORcanonicalapportMatch2.20.9-0ubuntu7.2
ORcanonicalapportMatch2.20.9-0ubuntu7.3
ORcanonicalapportMatch2.20.9-0ubuntu7.4
ORcanonicalapportMatch2.20.9-0ubuntu7.5
ORcanonicalapportMatch2.20.9-0ubuntu7.6
ORcanonicalapportMatch2.20.9-0ubuntu7.7
ORcanonicalapportMatch2.20.9-0ubuntu7.8
ORcanonicalapportMatch2.20.9-0ubuntu7.9
ORcanonicalapportMatch2.20.9-0ubuntu7.10
ORcanonicalapportMatch2.20.9-0ubuntu7.11
ORcanonicalapportMatch2.20.9-0ubuntu7.12
ORcanonicalapportMatch2.20.9-0ubuntu7.13
ORcanonicalapportMatch2.20.9-0ubuntu7.14
ORcanonicalapportMatch2.20.9-0ubuntu7.15
ORcanonicalapportMatch2.20.9-0ubuntu7.16
ORcanonicalapportMatch2.20.9-0ubuntu7.17
ORcanonicalapportMatch2.20.9-0ubuntu7.18
ORcanonicalapportMatch2.20.9-0ubuntu7.19
ORcanonicalapportMatch2.20.9-0ubuntu7.20
ORcanonicalapportMatch2.20.9-0ubuntu7.21
ORcanonicalapportMatch2.20.9-0ubuntu7.23
ORcanonicalapportMatch2.20.9-0ubuntu7.24
Node
canonicalubuntu_linuxMatch20.04
canonicalapportMatch2.20.11-0ubuntu8
ORcanonicalapportMatch2.20.11-0ubuntu9
ORcanonicalapportMatch2.20.11-0ubuntu10
ORcanonicalapportMatch2.20.11-0ubuntu11
ORcanonicalapportMatch2.20.11-0ubuntu12
ORcanonicalapportMatch2.20.11-0ubuntu13
ORcanonicalapportMatch2.20.11-0ubuntu14
ORcanonicalapportMatch2.20.11-0ubuntu15
ORcanonicalapportMatch2.20.11-0ubuntu16
ORcanonicalapportMatch2.20.11-0ubuntu17
ORcanonicalapportMatch2.20.11-0ubuntu18
ORcanonicalapportMatch2.20.11-0ubuntu19
ORcanonicalapportMatch2.20.11-0ubuntu20
ORcanonicalapportMatch2.20.11-0ubuntu21
ORcanonicalapportMatch2.20.11-0ubuntu22
ORcanonicalapportMatch2.20.11-0ubuntu23
ORcanonicalapportMatch2.20.11-0ubuntu24
ORcanonicalapportMatch2.20.11-0ubuntu25
ORcanonicalapportMatch2.20.11-0ubuntu26
ORcanonicalapportMatch2.20.11-0ubuntu27
ORcanonicalapportMatch2.20.11-0ubuntu27.2
ORcanonicalapportMatch2.20.11-0ubuntu27.3
ORcanonicalapportMatch2.20.11-0ubuntu27.4
ORcanonicalapportMatch2.20.11-0ubuntu27.5
ORcanonicalapportMatch2.20.11-0ubuntu27.6
ORcanonicalapportMatch2.20.11-0ubuntu27.7
ORcanonicalapportMatch2.20.11-0ubuntu27.8
ORcanonicalapportMatch2.20.11-0ubuntu27.9
ORcanonicalapportMatch2.20.11-0ubuntu27.10
ORcanonicalapportMatch2.20.11-0ubuntu27.11
ORcanonicalapportMatch2.20.11-0ubuntu27.12
ORcanonicalapportMatch2.20.11-0ubuntu27.13
ORcanonicalapportMatch2.20.11-0ubuntu27.14
ORcanonicalapportMatch2.20.11-0ubuntu27.16
ORcanonicalapportMatch2.20.11-0ubuntu27.17
ORcanonicalapportMatch2.20.11-0ubuntu27.18
Node
canonicalubuntu_linuxMatch21.04
canonicalapportMatch2.20.11-0ubuntu28
ORcanonicalapportMatch2.20.11-0ubuntu29
ORcanonicalapportMatch2.20.11-0ubuntu30
ORcanonicalapportMatch2.20.11-0ubuntu31
ORcanonicalapportMatch2.20.11-0ubuntu32
ORcanonicalapportMatch2.20.11-0ubuntu33
ORcanonicalapportMatch2.20.11-0ubuntu34
ORcanonicalapportMatch2.20.11-0ubuntu35
ORcanonicalapportMatch2.20.11-0ubuntu36
ORcanonicalapportMatch2.20.11-0ubuntu37
ORcanonicalapportMatch2.20.11-0ubuntu38
ORcanonicalapportMatch2.20.11-0ubuntu39
ORcanonicalapportMatch2.20.11-0ubuntu40
ORcanonicalapportMatch2.20.11-0ubuntu41
ORcanonicalapportMatch2.20.11-0ubuntu42
ORcanonicalapportMatch2.20.11-0ubuntu43
ORcanonicalapportMatch2.20.11-0ubuntu44
ORcanonicalapportMatch2.20.11-0ubuntu45
ORcanonicalapportMatch2.20.11-0ubuntu46
ORcanonicalapportMatch2.20.11-0ubuntu47
ORcanonicalapportMatch2.20.11-0ubuntu48
ORcanonicalapportMatch2.20.11-0ubuntu49
ORcanonicalapportMatch2.20.11-0ubuntu50
ORcanonicalapportMatch2.20.11-0ubuntu50.1
ORcanonicalapportMatch2.20.11-0ubuntu50.2
ORcanonicalapportMatch2.20.11-0ubuntu50.3
ORcanonicalapportMatch2.20.11-0ubuntu50.5
ORcanonicalapportMatch2.20.11-0ubuntu50.7
ORcanonicalapportMatch2.20.11-0ubuntu51
ORcanonicalapportMatch2.20.11-0ubuntu52
ORcanonicalapportMatch2.20.11-0ubuntu53
ORcanonicalapportMatch2.20.11-0ubuntu54
ORcanonicalapportMatch2.20.11-0ubuntu55
ORcanonicalapportMatch2.20.11-0ubuntu56
ORcanonicalapportMatch2.20.11-0ubuntu57
ORcanonicalapportMatch2.20.11-0ubuntu58
ORcanonicalapportMatch2.20.11-0ubuntu59
ORcanonicalapportMatch2.20.11-0ubuntu60
ORcanonicalapportMatch2.20.11-0ubuntu61
ORcanonicalapportMatch2.20.11-0ubuntu62
ORcanonicalapportMatch2.20.11-0ubuntu63
ORcanonicalapportMatch2.20.11-0ubuntu64
ORcanonicalapportMatch2.20.11-0ubuntu65
ORcanonicalapportMatch2.20.11-0ubuntu65.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| canonical | ubuntu_linux | 14.04 | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu1 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu1:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu2 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu2:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.1 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.1:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.2 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.2:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.3 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.3:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.4 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.4:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.5 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.5:*:*:*:*:*:*:* |
| canonical | apport | 2.14.1-0ubuntu3.6 | cpe:2.3:a:canonical:apport:2.14.1-0ubuntu3.6:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "apport",
"vendor": "Canonical",
"versions": [
{
"lessThan": "2.14.1-0ubuntu3.29+esm8",
"status": "affected",
"version": "2.14.1",
"versionType": "custom"
},
{
"lessThan": "2.20.1-0ubuntu2.30+esm2",
"status": "affected",
"version": "2.20.1",
"versionType": "custom"
},
{
"lessThan": "2.20.9-0ubuntu7.26",
"status": "affected",
"version": "2.20.9",
"versionType": "custom"
},
{
"changes": [
{
"at": "2.20.11-0ubuntu65.3",
"status": "unaffected"
}
],
"lessThan": "2.20.11-0ubuntu27.20",
"status": "affected",
"version": "2.20.11",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-3710
2021-10-01 03:15:07
cvelist
cvelist
CVE-2021-3710 Apport info disclosure via path traversal bug in read_file
2021-10-01 02:35:22
ubuntucve
ubuntucve
CVE-2021-3710
2021-09-14 00:00:00
prion
prion
Path traversal
2021-10-01 03:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-5077-2)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-5077-1)
2021-09-15 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : Apport vulnerabilities (USN-5077-2)
2021-09-14 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Apport vulnerabilities (USN-5077-1)
2021-09-14 00:00:00
osv
osv
apport vulnerabilities
2021-09-14 13:21:29
apport vulnerabilities
2021-09-14 11:54:26
ubuntu
ubuntu
Apport vulnerabilities
2021-09-14 00:00:00
Apport vulnerabilities
2021-09-14 00:00:00
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
27.8%
Related for CVE-2021-3710