CVE-2021-32554

5.5 mediumEPSS 0.3%

Medium (5.5) in canonical ubuntu linux. EPSS 0.3% chance of exploitation in the next 30 days.

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWEs: CWE-59, CWE-61
Published: 2021-06-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux

References

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904

Check your stack JSON