CVE-2021-32548: apport read_file() function could follow maliciously constructed symbolic links
Published Jun 12, 2021
·Updated
It was discovered that readfile() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport hooks, it could expose private data to other local users.
Affected Software
5 affected components
Ubuntu=18.04
Ubuntu=20.04
Ubuntu=20.10
Ubuntu=21.04
Ubuntu=21.10
Event History
Jun 12, 2021
CVE Published
via MITRE·03:40 AM
Data Sourced
via MITRE·03:40 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-32548?
CVE-2021-32548 has been classified as a high severity vulnerability due to its potential to expose private data.
2
How do I fix CVE-2021-32548?
Fixing CVE-2021-32548 involves updating the affected package to a version that does not include the vulnerable code.
3
Who is affected by CVE-2021-32548?
CVE-2021-32548 affects Ubuntu Linux users on versions 18.04, 20.04, 20.10, 21.04, and 21.10.
4
What can CVE-2021-32548 lead to?
CVE-2021-32548 could lead to unauthorized access to private data by other local users.
5
When was CVE-2021-32548 disclosed?
CVE-2021-32548 was disclosed in 2021, making it important for users to monitor their systems for updates.