1. Home
  2. CVE Database
  3. CVE-2021-32554
HIGH · 7.3

CVE-2021-32554

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other ...

Vulnerability Description

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
CanonicalUbuntu Linux18.04

Related Weaknesses (CWE)

CWE-59CWE-61

References

FAQ

What is CVE-2021-32554?

CVE-2021-32554 is a vulnerability with a CVSS score of 7.3 (HIGH). It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other ...

How severe is CVE-2021-32554?

CVE-2021-32554 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-32554?

Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux.