CVE-2021-25682

HIGH 7.8CVE-2021-25682 · Published 11/06/2021 · updated 17/06/2026

In short

CVE-2021-25682 is a HIGH (CVSS 7.8) vulnerability affecting apport (canonical).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.3% of all vulnerabilities.
Fix: update to 2.20.1-0ubuntu2.30, 2.20.11-0ubuntu27.16, 2.20.11-0ubuntu50.5, 2.20.9-0ubuntu7.23 or later.

Package	Affected versions	Patched versions
apport canonical	`≥ 2.20.1-0ubuntu1, < 2.20.1-0ubuntu2.30≥ 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.16≥ 2.20.11-0ubuntu50, < 2.20.11-0ubuntu50.5≥ 2.20.9-0ubuntu1, < 2.20.9-0ubuntu7.23`	`2.20.1-0ubuntu2.302.20.11-0ubuntu27.162.20.11-0ubuntu50.52.20.9-0ubuntu7.23`

Description

It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.

References

bugs.launchpad.net/ubuntu/+source/apport/+bug/1912326 · Exploit

More vulnerabilities in apport

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

apport

canonical

≥ 2.20.1-0ubuntu1, < 2.20.1-0ubuntu2.30≥ 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.16≥ 2.20.11-0ubuntu50, < 2.20.11-0ubuntu50.5≥ 2.20.9-0ubuntu1, < 2.20.9-0ubuntu7.23

2.20.1-0ubuntu2.302.20.11-0ubuntu27.162.20.11-0ubuntu50.52.20.9-0ubuntu7.23

More vulnerabilities in apport

See all →