CVE-2021-3710
Apport info disclosure via path traversal bug in read_file
MEDIUM
5.5
CVSS Score
Published: October 1, 2021 at 02:35 AM UTC
Updated: June 17, 2026 at 04:05 AM UTC
2 products affected across 2 vendorsApportUbuntu Linux
Using apport by Canonical?
Get instant alerts when new vulnerabilities affect apport - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.5%
Description
An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.14.1 ≤ v < 2.14.1-0ubuntu3.29+esm82.20.1 ≤ v < 2.20.1-0ubuntu2.30+esm22.20.11 ≤ v < 2.20.11-0ubuntu27.202.20.9 ≤ v < 2.20.9-0ubuntu7.262.14.12.14.1-0ubuntu12.14.1-0ubuntu22.14.1-0ubuntu32.14.1-0ubuntu3.12.14.1-0ubuntu3.102.14.1-0ubuntu3.112.14.1-0ubuntu3.122.14.1-0ubuntu3.132.14.1-0ubuntu3.142.14.1-0ubuntu3.152.14.1-0ubuntu3.162.14.1-0ubuntu3.172.14.1-0ubuntu3.182.14.1-0ubuntu3.192.14.1-0ubuntu3.22.14.1-0ubuntu3.202.14.1-0ubuntu3.212.14.1-0ubuntu3.232.14.1-0ubuntu3.242.14.1-0ubuntu3.252.14.1-0ubuntu3.272.14.1-0ubuntu3.282.14.1-0ubuntu3.292.14.1-0ubuntu3.29 esm72.14.1-0ubuntu3.32.14.1-0ubuntu3.42.14.1-0ubuntu3.52.14.1-0ubuntu3.62.14.1-0ubuntu3.72.14.1-0ubuntu3.82.14.1-0ubuntu3.92.20.12.20.1-0ubuntu12.20.1-0ubuntu22.20.1-0ubuntu2.12.20.1-0ubuntu2.102.20.1-0ubuntu2.122.20.1-0ubuntu2.132.20.1-0ubuntu2.142.20.1-0ubuntu2.152.20.1-0ubuntu2.162.20.1-0ubuntu2.172.20.1-0ubuntu2.182.20.1-0ubuntu2.192.20.1-0ubuntu2.22.20.1-0ubuntu2.202.20.1-0ubuntu2.212.20.1-0ubuntu2.222.20.1-0ubuntu2.232.20.1-0ubuntu2.252.20.1-0ubuntu2.262.20.1-0ubuntu2.272.20.1-0ubuntu2.282.20.1-0ubuntu2.302.20.1-0ubuntu2.30 esm12.20.1-0ubuntu2.42.20.1-0ubuntu2.52.20.1-0ubuntu2.62.20.1-0ubuntu2.72.20.1-0ubuntu2.82.20.1-0ubuntu2.92.20.112.20.11-0ubuntu102.20.11-0ubuntu112.20.11-0ubuntu122.20.11-0ubuntu132.20.11-0ubuntu142.20.11-0ubuntu152.20.11-0ubuntu162.20.11-0ubuntu172.20.11-0ubuntu182.20.11-0ubuntu192.20.11-0ubuntu202.20.11-0ubuntu212.20.11-0ubuntu222.20.11-0ubuntu232.20.11-0ubuntu242.20.11-0ubuntu252.20.11-0ubuntu262.20.11-0ubuntu272.20.11-0ubuntu27.102.20.11-0ubuntu27.112.20.11-0ubuntu27.122.20.11-0ubuntu27.132.20.11-0ubuntu27.142.20.11-0ubuntu27.162.20.11-0ubuntu27.172.20.11-0ubuntu27.182.20.11-0ubuntu27.22.20.11-0ubuntu27.32.20.11-0ubuntu27.42.20.11-0ubuntu27.52.20.11-0ubuntu27.62.20.11-0ubuntu27.72.20.11-0ubuntu27.82.20.11-0ubuntu27.92.20.11-0ubuntu282.20.11-0ubuntu292.20.11-0ubuntu302.20.11-0ubuntu312.20.11-0ubuntu322.20.11-0ubuntu332.20.11-0ubuntu342.20.11-0ubuntu352.20.11-0ubuntu362.20.11-0ubuntu372.20.11-0ubuntu382.20.11-0ubuntu392.20.11-0ubuntu402.20.11-0ubuntu412.20.11-0ubuntu422.20.11-0ubuntu432.20.11-0ubuntu442.20.11-0ubuntu452.20.11-0ubuntu462.20.11-0ubuntu472.20.11-0ubuntu482.20.11-0ubuntu492.20.11-0ubuntu502.20.11-0ubuntu50.12.20.11-0ubuntu50.22.20.11-0ubuntu50.32.20.11-0ubuntu50.52.20.11-0ubuntu50.72.20.11-0ubuntu512.20.11-0ubuntu522.20.11-0ubuntu532.20.11-0ubuntu542.20.11-0ubuntu552.20.11-0ubuntu562.20.11-0ubuntu572.20.11-0ubuntu582.20.11-0ubuntu592.20.11-0ubuntu602.20.11-0ubuntu612.20.11-0ubuntu622.20.11-0ubuntu632.20.11-0ubuntu642.20.11-0ubuntu652.20.11-0ubuntu65.12.20.11-0ubuntu82.20.11-0ubuntu92.20.92.20.9-0ubuntu12.20.9-0ubuntu22.20.9-0ubuntu32.20.9-0ubuntu42.20.9-0ubuntu52.20.9-0ubuntu62.20.9-0ubuntu72.20.9-0ubuntu7.12.20.9-0ubuntu7.102.20.9-0ubuntu7.112.20.9-0ubuntu7.122.20.9-0ubuntu7.132.20.9-0ubuntu7.142.20.9-0ubuntu7.152.20.9-0ubuntu7.162.20.9-0ubuntu7.172.20.9-0ubuntu7.182.20.9-0ubuntu7.192.20.9-0ubuntu7.22.20.9-0ubuntu7.202.20.9-0ubuntu7.212.20.9-0ubuntu7.232.20.9-0ubuntu7.242.20.9-0ubuntu7.32.20.9-0ubuntu7.42.20.9-0ubuntu7.52.20.9-0ubuntu7.62.20.9-0ubuntu7.72.20.9-0ubuntu7.82.20.9-0ubuntu7.9
Affected range stops below 2.14.1-0ubuntu3.29+esm8, so it looks safe — our inference, not a vendor statement
Affected range stops below 2.20.1-0ubuntu2.30+esm2, so it looks safe — our inference, not a vendor statement
Affected range stops below 2.20.11-0ubuntu27.20, so it looks safe — our inference, not a vendor statement
Affected range stops below 2.20.9-0ubuntu7.26, so it looks safe — our inference, not a vendor statement
canonical-ubuntu-linux (environment)
Ubuntu Linux· Canonicalrubygemsdevice
80%All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (4)
x_refsource_MISCExploitVendor Advisory
Source: [email protected]
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1933832x_refsource_MISCThird Party Advisory
Source: [email protected]
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3710x_refsource_MISCVendor Advisory
Source: [email protected]
https://ubuntu.com/security/notices/USN-5077-1x_refsource_MISCVendor Advisory
Source: [email protected]
https://ubuntu.com/security/notices/USN-5077-2CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- NONE
- Availability
- NONE
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-24CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card