Skip to content
OpenAdvisories
High · 8.8 CVE-2021-25684 EUVD-2021-12576GHSA-5wpx-42qp-2c7p

apport can be stalled by reading a FIFO

Published Jun 11, 2021 · Updated Nov 3, 2025 · Assigned by canonical

Description

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO.

Affected products

VendorProductAffectedFixed
Canonical apport 2.20.1 – < 2.20.1-0ubuntu2.30, 2.20.9 – < 2.20.9-0ubuntu7.23, 2.20.11-0ubuntu27 – < 2.20.11-0ubuntu27.16, 2.20.11-0ubuntu50 – < 2.20.11-0ubuntu50.5 2.20.1-0ubuntu2.30

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS apport 2.20.11-0ubuntu27.16 USN-4720-1
Ubuntu 18.04 LTS apport 2.20.9-0ubuntu7.23 USN-4720-1
Ubuntu 16.04 LTS apport 2.20.1-0ubuntu2.30 USN-4720-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS apport 2.14.1-0ubuntu3.29+esm6 USN-4720-2

Advisories 2

References