CVE-2021-32557

HIGH 7.1CVE-2021-32557 · Published 12/06/2021 · updated 17/06/2026

In short

CVE-2021-32557 is a HIGH (CVSS 7.1) vulnerability affecting apport (canonical).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.1% of all vulnerabilities.
Fix: update to 2.14.1-0ubuntu3.29\+esm7, 2.20.1-0ubuntu2.30\+esm1, 2.20.11-0ubuntu27.18, 2.20.11-0ubuntu50.7 or later.

Package	Affected versions	Patched versions
apport canonical	`≥ 2.14.1-0ubuntu3, < 2.14.1-0ubuntu3.29\+esm7≥ 2.20.1, < 2.20.1-0ubuntu2.30\+esm1≥ 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.18≥ 2.20.11-0ubuntu50, < 2.20.11-0ubuntu50.7≥ 2.20.11-0ubuntu65, < 2.20.11-0ubuntu65.1≥ 2.20.9, < 2.20.9-0ubuntu7.24`	`2.14.1-0ubuntu3.29\+esm72.20.1-0ubuntu2.30\+esm12.20.11-0ubuntu27.182.20.11-0ubuntu50.72.20.11-0ubuntu65.12.20.9-0ubuntu7.24`

Description

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.

References

bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904 · Exploit

More vulnerabilities in apport

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

apport

canonical

≥ 2.14.1-0ubuntu3, < 2.14.1-0ubuntu3.29\+esm7≥ 2.20.1, < 2.20.1-0ubuntu2.30\+esm1≥ 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.18≥ 2.20.11-0ubuntu50, < 2.20.11-0ubuntu50.7≥ 2.20.11-0ubuntu65, < 2.20.11-0ubuntu65.1≥ 2.20.9, < 2.20.9-0ubuntu7.24

2.14.1-0ubuntu3.29\+esm72.20.1-0ubuntu2.30\+esm12.20.11-0ubuntu27.182.20.11-0ubuntu50.72.20.11-0ubuntu65.12.20.9-0ubuntu7.24

More vulnerabilities in apport

See all →