NetSight
high8.8

CVE-2021-25682

It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.

Impact

It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.

Affected products

VendorProductAffected versions
CanonicalApport
from 2.20.1-0ubuntu1 before 2.20.1-0ubuntu2.30
from 2.20.9-0ubuntu1 before 2.20.9-0ubuntu7.23
from 2.20.11-0ubuntu27 before 2.20.11-0ubuntu27.16
from 2.20.11-0ubuntu50 before 2.20.11-0ubuntu50.5

Weakness classification

References