CVE-2021-3899

Summary

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1948376
• https://ubuntu.com/security/notices/USN-5427-1
• https://www.cve.org/CVERecord?id=CVE-2021-3899

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1948376
• https://ubuntu.com/security/notices/USN-5427-1
• https://www.cve.org/CVERecord?id=CVE-2021-3899

• ←Previous
• Next→