title: apport read_file() function could follow maliciously constructed symbolic links
description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users.
problem types: CWE-59 Improper Link Resolution Before File Access ('Link Following')
affected:
{
product: apport
vendor: Canonical
versions:
lessThan: 2.20.1-0ubuntu2.30+esm1, status: affected, version: 2.20.1, versionType: custom
lessThan: 2.20.9-0ubuntu7.24, status: affected, version: 2.20.9, versionType: custom
lessThan: 2.20.11-0ubuntu27.18, status: affected, version: 2.20.11-0ubuntu27, versionType: custom
lessThan: 2.20.11-0ubuntu50.7, status: affected, version: 2.20.11-0ubuntu50, versionType: custom
lessThan: 2.20.11-0ubuntu65.1, status: affected, version: 2.20.11-0ubuntu65, versionType: custom
lessThan: 2.14.1-0ubuntu3.29+esm7, status: affected, version: 2.14.1-0ubuntu3, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
version: 3.1
]