CVE-2021-32553

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-32553
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32553.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-32553
Downstream
Published
2021-06-12T04:15:12.157Z
Modified
2026-04-10T04:32:46.540532Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.

References

Affected packages

Git / github.com/openjdk/jdk

Affected ranges

Type
GIT
Repo
https://github.com/openjdk/jdk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4925a3959c319028014437fdb393312bcb3627d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
861e302011bb3aaf0c8431c121b58a57b78481e3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dfacda488bfbe2e11e8d607a6d08527710286982
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "20.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "21.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17"
        }
    ]
}
Type
GIT
Repo
https://github.com/openjdk/jdk8u
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4e63c52abe9aecd28033ea5b51b47f834729620f
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "20.04"
        }
    ]
}

Affected versions

Other
jdk-10+20
jdk-10+21
jdk-10+22
jdk-10+23
jdk-10+24
jdk-12+0
jdk-15+0
jdk-15+1
jdk-15+2
jdk-15+3
jdk-15+4
jdk-15+6
jdk-16+14
jdk-16+15
jdk-16+16
jdk-16+17
jdk-16+18
jdk-16+19
jdk-16+20
jdk-16+21
jdk-16+22
jdk-16+23
jdk-16+24
jdk-16+25
jdk-16+26
jdk-16+27
jdk-16+28
jdk-17+0
jdk-17+1
jdk-17+10
jdk-17+11
jdk-17+12
jdk-17+13
jdk-17+14
jdk-17+15
jdk-17+16
jdk-17+17
jdk-17+18
jdk-17+19
jdk-17+2
jdk-17+20
jdk-17+21
jdk-17+22
jdk-17+23
jdk-17+24
jdk-17+25
jdk-17+26
jdk-17+27
jdk-17+28
jdk-17+29
jdk-17+3
jdk-17+30
jdk-17+31
jdk-17+32
jdk-17+33
jdk-17+34
jdk-17+35
jdk-17+4
jdk-17+5
jdk-17+6
jdk-17+7
jdk-17+8
jdk-17+9
jdk-17-ga
jdk-18+0
jdk-18+1
jdk-18+10
jdk-18+11
jdk-18+12
jdk-18+13
jdk-18+14
jdk-18+15
jdk-18+16
jdk-18+17
jdk-18+18
jdk-18+19
jdk-18+2
jdk-18+20
jdk-18+21
jdk-18+22
jdk-18+23
jdk-18+24
jdk-18+25
jdk-18+26
jdk-18+27
jdk-18+3
jdk-18+4
jdk-18+5
jdk-18+6
jdk-18+7
jdk-18+8
jdk-18+9
jdk-19+0
jdk-19+1
jdk-19+10
jdk-19+11
jdk-19+12
jdk-19+13
jdk-19+14
jdk-19+15
jdk-19+16
jdk-19+17
jdk-19+18
jdk-19+19
jdk-19+2
jdk-19+20
jdk-19+21
jdk-19+22
jdk-19+23
jdk-19+24
jdk-19+25
jdk-19+26
jdk-19+3
jdk-19+4
jdk-19+5
jdk-19+6
jdk-19+7
jdk-19+8
jdk-19+9
jdk-20+0
jdk-20+1
jdk-20+10
jdk-20+11
jdk-20+12
jdk-20+13
jdk-20+14
jdk-20+15
jdk-20+16
jdk-20+17
jdk-20+18
jdk-20+19
jdk-20+2
jdk-20+20
jdk-20+21
jdk-20+22
jdk-20+23
jdk-20+24
jdk-20+25
jdk-20+26
jdk-20+27
jdk-20+3
jdk-20+4
jdk-20+5
jdk-20+6
jdk-20+7
jdk-20+8
jdk-20+9
jdk-21+0
jdk-21+1
jdk-21+10
jdk-21+2
jdk-21+3
jdk-21+4
jdk-21+5
jdk-21+6
jdk-21+7
jdk-21+8
jdk-21+9
jdk-9+100
jdk-9+101
jdk-9+102
jdk-9+103
jdk-9+104
jdk-9+105
jdk-9+106
jdk-9+107
jdk-9+108
jdk-9+109
jdk-9+110
jdk-9+111
jdk-9+112
jdk-9+113
jdk-9+114
jdk-9+115
jdk-9+116
jdk-9+117
jdk-9+118
jdk-9+119
jdk-9+120
jdk-9+121
jdk-9+122
jdk-9+123
jdk-9+124
jdk-9+127
jdk-9+128
jdk-9+129
jdk-9+130
jdk-9+131
jdk-9+132
jdk-9+133
jdk-9+134
jdk-9+135
jdk-9+136
jdk-9+137
jdk-9+138
jdk-9+139
jdk-9+140
jdk-9+141
jdk-9+142
jdk-9+143
jdk-9+144
jdk-9+145
jdk-9+146
jdk-9+147
jdk-9+148
jdk-9+149
jdk-9+150
jdk-9+151
jdk-9+152
jdk-9+153
jdk-9+154
jdk-9+155
jdk-9+156
jdk-9+95
jdk-9+96
jdk-9+97
jdk-9+98
jdk-9+99
jdk7-b100
jdk7-b101
jdk7-b102
jdk7-b103
jdk7-b104
jdk7-b105
jdk7-b106
jdk7-b107
jdk7-b108
jdk7-b120
jdk7-b121
jdk7-b122
jdk7-b123
jdk7-b124
jdk7-b125
jdk7-b126
jdk7-b127
jdk7-b128
jdk7-b129
jdk7-b130
jdk7-b131
jdk7-b132
jdk7-b133
jdk7-b134
jdk7-b135
jdk7-b136
jdk7-b137
jdk7-b138
jdk7-b139
jdk7-b140
jdk7-b141
jdk7-b143
jdk7-b24
jdk7-b25
jdk7-b26
jdk7-b27
jdk7-b28
jdk7-b31
jdk7-b32
jdk7-b33
jdk7-b34
jdk7-b35
jdk7-b36
jdk7-b38
jdk7-b39
jdk7-b40
jdk7-b41
jdk7-b44
jdk7-b45
jdk7-b46
jdk7-b48
jdk7-b49
jdk7-b50
jdk7-b51
jdk7-b53
jdk7-b54
jdk7-b55
jdk7-b56
jdk7-b60
jdk7-b61
jdk7-b62
jdk7-b63
jdk7-b64
jdk7-b65
jdk7-b66
jdk7-b68
jdk7-b70
jdk7-b71
jdk7-b72
jdk7-b73
jdk7-b74
jdk7-b75
jdk7-b76
jdk7-b77
jdk7-b78
jdk7-b79
jdk7-b80
jdk7-b81
jdk7-b82
jdk7-b83
jdk7-b84
jdk7-b85
jdk7-b86
jdk7-b87
jdk7-b88
jdk7-b89
jdk7-b90
jdk7-b91
jdk7-b92
jdk7-b93
jdk7-b94
jdk7-b95
jdk7-b96
jdk7-b97
jdk7-b98
jdk7-b99
jdk8-b01
jdk8-b119
jdk8-b120
jdk8-b122
jdk8-b123
jdk8-b15
jdk8-b16
jdk8-b18
jdk8-b19
jdk8-b20
jdk8-b21
jdk8-b22
jdk8-b23
jdk8-b24
jdk8-b25
jdk8-b26
jdk8-b27
jdk8-b28
jdk8-b29
jdk8-b30
jdk8-b31
jdk8-b32
jdk8-b33
jdk8-b34
jdk8-b35
jdk8-b36
jdk8-b37
jdk8-b38
jdk8-b39
jdk8-b40
jdk8-b41
jdk8-b42
jdk8-b43
jdk8-b44
jdk8-b45
jdk8-b46
jdk8-b49
jdk8-b50
jdk8-b52
jdk8-b53
jdk8-b54
jdk8-b55
jdk8u20-b04
jdk9-b00
jdk9-b01
jdk9-b04
jdk9-b05
jdk9-b06
jdk9-b07
jdk9-b08
jdk9-b10
jdk9-b11
jdk9-b12
jdk9-b13
jdk9-b14
jdk9-b15
jdk9-b16
jdk9-b17
jdk9-b18
jdk9-b19
jdk9-b20
jdk9-b21
jdk9-b23
jdk9-b24
jdk9-b25
jdk9-b26
jdk9-b27
jdk9-b30
jdk9-b31
jdk9-b32
jdk9-b33
jdk9-b34
jdk9-b35
jdk9-b36
jdk9-b37
jdk9-b38
jdk9-b39
jdk9-b40
jdk9-b41
jdk9-b42
jdk9-b43
jdk9-b44
jdk9-b45
jdk9-b46
jdk9-b47
jdk9-b48
jdk9-b49
jdk9-b50
jdk9-b51
jdk9-b52
jdk9-b53
jdk9-b54
jdk9-b55
jdk9-b56
jdk9-b57
jdk9-b58
jdk9-b59
jdk9-b60
jdk9-b61
jdk9-b62
jdk9-b63
jdk9-b64
jdk9-b65
jdk9-b66
jdk9-b67
jdk9-b68
jdk9-b69
jdk9-b70
jdk9-b71
jdk9-b72
jdk9-b73
jdk9-b74
jdk9-b75
jdk9-b76
jdk9-b77
jdk9-b78
jdk9-b79
jdk9-b80
jdk9-b81
jdk9-b82
jdk9-b83
jdk9-b84
jdk9-b85
jdk9-b86
jdk9-b87
jdk9-b88
jdk9-b89
jdk9-b90
jdk9-b91
jdk9-b92
jdk9-b94

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32553.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.04"
            }
        ]
    }
]