CVE-2021-32557 apport process_report() arbitrary file write

What is CVE-2021-32557?

CVE-2021-32557 is a medium-severity path traversal vulnerability in Canonical apport, published on 12 Jun 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.

Weakness: CWE-61, CWE-59

Which versions are affected by CVE-2021-32557?

It affects 1 product.

Products include Canonical Apport.

How do I fix CVE-2021-32557?

Apply the vendor's patch.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2021-32557 being exploited?

There is no known exploitation of CVE-2021-32557 in the wild and no public exploit code.

Other vulnerabilities in Canonical apport

• CVE-2021-25682 apport improperly parses /proc/pid/status High 8.8
• CVE-2021-25683 apport improperly parses /proc/pid/stat High 8.8
• CVE-2021-25684 apport can be stalled by reading a FIFO High 8.8
• CVE-2021-3899 Race condition in Apport High 7.8
• CVE-2022-1242 Other in Apport High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-ggh9-6q6m-3fh2, UBUNTU-CVE-2021-32557.