CVE-2021-3899

CWE-3678 documents5 sources
Severity
7.8HIGH
EPSS
2.2%
top 15.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Canonical Ltd. ApportCanonical ApportCanonical Ubuntu Linux
Timeline
PublishedJun 3
Latest updateJul 11

Description

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDcanonical/apport< 2.21.0
▶CVEListV5canonical_ltd./apport< 2.21.0
▶Ubuntuapport< 2.20.9-0ubuntu7.28+3

Also affects: Ubuntu Linux 18.04, 20.04, 21.10, 22.04

Patches

Patch: bugs.launchpad.net ↗Patch: bugs.launchpad.net ↗

🔴Vulnerability Details

5
OSV
apport vulnerabilities↗2024-07-11
▶
GHSA
GHSA-m676-gr96-hhhh: There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary co↗2024-06-03
▶
CVEList
CVE-2021-3899: There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary co↗2024-06-03
▶
OSV
CVE-2021-3899: There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary co↗2022-05-17
▶
OSV
apport vulnerabilities↗2022-05-17
▶

📋Vendor Advisories

2
Ubuntu
Apport vulnerabilities↗2024-07-11
▶
Ubuntu
Apport vulnerabilities↗2022-05-17
▶
CVE-2021-3899 (HIGH CVSS 7.8) | There is a race condition in the 'r | cvebase.io