CVE-2021-3899 — Canonical Ltd. / Apport

Description (CNA)

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.

Affected (CNA)

Vendor / product	Versions
Canonical Ltd. / Apport	affected 0 before 2.21.0

CWE

No CWE identifiers supplied.

References

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1948376
https://ubuntu.com/security/notices/USN-5427-1
https://www.cve.org/CVERecord?id=CVE-2021-3899

ADP enrichment

CVE

No English description supplied.

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1948376
https://ubuntu.com/security/notices/USN-5427-1
https://www.cve.org/CVERecord?id=CVE-2021-3899

CISA-ADP

No English description supplied.

No references supplied.