Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-25683

apport improperly parses /proc/pid/stat

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical apport

  • 2.20.1 to < 2.20.1-0ubuntu2.30affected
  • 2.20.9 to < 2.20.9-0ubuntu7.23affected
  • 2.20.11-0ubuntu27 to < 2.20.11-0ubuntu27.16affected
  • 2.20.11-0ubuntu50 to < 2.20.11-0ubuntu50.5affected

References