CVE-2021-32556

LOW 3.3CVE-2021-32556 · Published 12/06/2021 · updated 17/06/2026

In short

CVE-2021-32556 is a LOW (CVSS 3.3) vulnerability affecting apport (canonical).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 26.5% of all vulnerabilities.
Fix: update to 2.14.1-0ubuntu3.29\+esm7, 2.20.1-0ubuntu2.30\+esm1, 2.20.11-0ubuntu27.18, 2.20.11-0ubuntu50.7 or later.

Package	Affected versions	Patched versions
apport canonical	`≥ 2.14.1-0ubuntu3, < 2.14.1-0ubuntu3.29\+esm7≥ 2.20.1, < 2.20.1-0ubuntu2.30\+esm1≥ 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.18≥ 2.20.11-0ubuntu50, < 2.20.11-0ubuntu50.7≥ 2.20.11-0ubuntu65, < 2.20.11-0ubuntu65.1≥ 2.20.9, < 2.20.9-0ubuntu7.24`	`2.14.1-0ubuntu3.29\+esm72.20.1-0ubuntu2.30\+esm12.20.11-0ubuntu27.182.20.11-0ubuntu50.72.20.11-0ubuntu65.12.20.9-0ubuntu7.24`

Description

It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.

References

bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904 · Vendor Advisory

More vulnerabilities in apport

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

apport

canonical

≥ 2.14.1-0ubuntu3, < 2.14.1-0ubuntu3.29\+esm7≥ 2.20.1, < 2.20.1-0ubuntu2.30\+esm1≥ 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.18≥ 2.20.11-0ubuntu50, < 2.20.11-0ubuntu50.7≥ 2.20.11-0ubuntu65, < 2.20.11-0ubuntu65.1≥ 2.20.9, < 2.20.9-0ubuntu7.24

2.14.1-0ubuntu3.29\+esm72.20.1-0ubuntu2.30\+esm12.20.11-0ubuntu27.182.20.11-0ubuntu50.72.20.11-0ubuntu65.12.20.9-0ubuntu7.24

More vulnerabilities in apport

See all →