What is CVE-2021-32553?

CVE-2021-32553 is a vulnerability where the read_file() function in apport/hookutils.py can follow symbolic links or open FIFOs, potentially exposing private data to other local users.

How does CVE-2021-32553 affect Ubuntu Linux?

CVE-2021-32553 affects Ubuntu Linux versions 18.04, 20.04, 20.10, 21.04, and 21.10.

What is the severity of CVE-2021-32553?

The severity of CVE-2021-32553 is high with a CVSS score of 5.5.

How can I fix CVE-2021-32553?

To fix CVE-2021-32553, it is recommended to update the affected software to a patched version provided by the vendor.

Where can I find more information about CVE-2021-32553?

You can find more information about CVE-2021-32553 at the following reference link: [https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904](https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904)

Vulnerability/
CVE-2021-32553

high

7.3

CWE

59 61

12/6/2021

16/9/2024

CVE-2021-32553: apport read_file() function could follow maliciously constructed symbolic links

First published: Sat Jun 12 2021(Updated: )

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.

Credit: security@ubuntu.com

Affected Software	Affected Version	How to fix
Canonical Ubuntu Linux	=18.04
Canonical Ubuntu Linux	=20.04
Canonical Ubuntu Linux	=20.10
Canonical Ubuntu Linux	=21.04
Canonical Ubuntu Linux	=21.10
Oracle OpenJDK	=17

Never miss a vulnerability like this again

Reference Links

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904

Frequently Asked Questions

What is CVE-2021-32553?
CVE-2021-32553 is a vulnerability where the read_file() function in apport/hookutils.py can follow symbolic links or open FIFOs, potentially exposing private data to other local users.
How does CVE-2021-32553 affect Ubuntu Linux?
CVE-2021-32553 affects Ubuntu Linux versions 18.04, 20.04, 20.10, 21.04, and 21.10.
What is the severity of CVE-2021-32553?
The severity of CVE-2021-32553 is high with a CVSS score of 5.5.
How can I fix CVE-2021-32553?
To fix CVE-2021-32553, it is recommended to update the affected software to a patched version provided by the vendor.
Where can I find more information about CVE-2021-32553?
You can find more information about CVE-2021-32553 at the following reference link: [https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904](https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904)

agent/weakness
agent/type
agent/references
agent/author
agent/description
collector/nvd-index
agent/software-canonical-lookup-request
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/title
agent/last-modified-date
agent/tags
agent/first-publish-date
agent/event
vendor/canonical
canonical/canonical ubuntu linux
version/canonical ubuntu linux/18.04
version/canonical ubuntu linux/20.04
version/canonical ubuntu linux/20.10
version/canonical ubuntu linux/21.04
version/canonical ubuntu linux/21.10
vendor/oracle
canonical/oracle openjdk
version/oracle openjdk/17

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.