CVE-2021-25682
apport improperly parses /proc/pid/status
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
apport improperly parses /proc/pid/status
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
- Record
CVE-2021-25682- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2021-12574
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
- Record
EUVD-2021-12574- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7398-g2qh-pr9p
It was discovered that the get_pid_info() function in data/apport did not properly parse the ...
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
- Record
GHSA-7398-g2qh-pr9p- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20, CWE-74
- Updated
- 2026-11-02
NVD
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
- Record
CVE-2021-25682- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20, CWE-74
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-25682
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
- Record
UBUNTU-CVE-2021-25682- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUSN-4720-1 No score
apport vulnerabilities
Itai Greenhut discovered that Apport incorrectly parsed certain files in the /proc filesystem. A local attacker could use this issue to escalate privileges and run arbitrary code. (CVE-2021-25682, CVE-2021-25683)
Itai Greenhut discovered that Apport incorrectly handled opening certain special files. A local attacker could possibly use this issue to cause Apport to hang, resulting in a denial of service. (CVE-2021-25684)
- Record
USN-4720-1- Updated
- 2026-11-02
OSVUSN-4720-2 No score
apport vulnerabilities
USN-4720-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
Itai Greenhut discovered that Apport incorrectly parsed certain files in the /proc filesystem. A local attacker could use this issue to escalate privileges and run arbitrary code. (CVE-2021-25682, CVE-2021-25683)
Itai Greenhut discovered that Apport incorrectly handled opening certain special files. A local attacker could possibly use this issue to cause Apport to hang, resulting in a denial of service. (CVE-2021-25684)
- Record
USN-4720-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apportUbuntu:Pro:14.04:LTS |
before 2.14.1-0ubuntu3.29+esm6, plus listed versions 2.12.5-0ubuntu22.12.6-0ubuntu12.12.7-0ubuntu12.12.7-0ubuntu22.12.7-0ubuntu3 Show 42 moreShow less2.12.7-0ubuntu62.13.1-0ubuntu12.13.1-0ubuntu22.13.2-0ubuntu22.13.2-0ubuntu32.13.2-0ubuntu42.13.2-0ubuntu52.13.3-0ubuntu12.14-0ubuntu12.14.1-0ubuntu12.14.1-0ubuntu22.14.1-0ubuntu32.14.1-0ubuntu3.12.14.1-0ubuntu3.22.14.1-0ubuntu3.32.14.1-0ubuntu3.42.14.1-0ubuntu3.52.14.1-0ubuntu3.62.14.1-0ubuntu3.72.14.1-0ubuntu3.82.14.1-0ubuntu3.92.14.1-0ubuntu3.102.14.1-0ubuntu3.112.14.1-0ubuntu3.122.14.1-0ubuntu3.132.14.1-0ubuntu3.152.14.1-0ubuntu3.162.14.1-0ubuntu3.182.14.1-0ubuntu3.192.14.1-0ubuntu3.202.14.1-0ubuntu3.212.14.1-0ubuntu3.232.14.1-0ubuntu3.242.14.1-0ubuntu3.252.14.1-0ubuntu3.272.14.1-0ubuntu3.282.14.1-0ubuntu3.292.14.1-0ubuntu3.29+esm12.14.1-0ubuntu3.29+esm22.14.1-0ubuntu3.29+esm32.14.1-0ubuntu3.29+esm42.14.1-0ubuntu3.29+esm5 |
2.14.1-0ubuntu3.29+esm6 |
apportUbuntu:16.04:LTS |
before 2.20.1-0ubuntu2.30, plus listed versions 2.19.1-0ubuntu32.19.2-0ubuntu12.19.2-0ubuntu22.19.2-0ubuntu32.19.2-0ubuntu4 Show 37 moreShow less2.19.2-0ubuntu52.19.2-0ubuntu62.19.2-0ubuntu82.19.2-0ubuntu92.19.3-0ubuntu12.19.3-0ubuntu22.19.3-0ubuntu32.19.4-0ubuntu12.19.4-0ubuntu22.20-0ubuntu22.20-0ubuntu32.20.1-0ubuntu12.20.1-0ubuntu22.20.1-0ubuntu2.12.20.1-0ubuntu2.22.20.1-0ubuntu2.42.20.1-0ubuntu2.52.20.1-0ubuntu2.62.20.1-0ubuntu2.92.20.1-0ubuntu2.102.20.1-0ubuntu2.122.20.1-0ubuntu2.132.20.1-0ubuntu2.142.20.1-0ubuntu2.152.20.1-0ubuntu2.162.20.1-0ubuntu2.172.20.1-0ubuntu2.182.20.1-0ubuntu2.192.20.1-0ubuntu2.202.20.1-0ubuntu2.212.20.1-0ubuntu2.222.20.1-0ubuntu2.232.20.1-0ubuntu2.242.20.1-0ubuntu2.252.20.1-0ubuntu2.262.20.1-0ubuntu2.272.20.1-0ubuntu2.28 |
2.20.1-0ubuntu2.30 |
apportUbuntu:18.04:LTS |
before 2.20.9-0ubuntu7.23, plus listed versions 2.20.7-0ubuntu32.20.7-0ubuntu3.12.20.7-0ubuntu42.20.8-0ubuntu12.20.8-0ubuntu2 Show 34 moreShow less2.20.8-0ubuntu32.20.8-0ubuntu42.20.8-0ubuntu52.20.8-0ubuntu62.20.8-0ubuntu72.20.8-0ubuntu82.20.8-0ubuntu92.20.8-0ubuntu102.20.9-0ubuntu12.20.9-0ubuntu22.20.9-0ubuntu42.20.9-0ubuntu52.20.9-0ubuntu62.20.9-0ubuntu72.20.9-0ubuntu7.12.20.9-0ubuntu7.22.20.9-0ubuntu7.32.20.9-0ubuntu7.42.20.9-0ubuntu7.52.20.9-0ubuntu7.62.20.9-0ubuntu7.72.20.9-0ubuntu7.82.20.9-0ubuntu7.92.20.9-0ubuntu7.112.20.9-0ubuntu7.122.20.9-0ubuntu7.132.20.9-0ubuntu7.142.20.9-0ubuntu7.152.20.9-0ubuntu7.162.20.9-0ubuntu7.172.20.9-0ubuntu7.182.20.9-0ubuntu7.192.20.9-0ubuntu7.202.20.9-0ubuntu7.21 |
2.20.9-0ubuntu7.23 |
apportUbuntu:20.04:LTS |
before 2.20.11-0ubuntu27.16, plus listed versions 2.20.11-0ubuntu82.20.11-0ubuntu92.20.11-0ubuntu132.20.11-0ubuntu142.20.11-0ubuntu15 Show 22 moreShow less2.20.11-0ubuntu162.20.11-0ubuntu172.20.11-0ubuntu182.20.11-0ubuntu192.20.11-0ubuntu202.20.11-0ubuntu212.20.11-0ubuntu222.20.11-0ubuntu242.20.11-0ubuntu252.20.11-0ubuntu262.20.11-0ubuntu272.20.11-0ubuntu27.22.20.11-0ubuntu27.32.20.11-0ubuntu27.42.20.11-0ubuntu27.62.20.11-0ubuntu27.82.20.11-0ubuntu27.92.20.11-0ubuntu27.102.20.11-0ubuntu27.112.20.11-0ubuntu27.122.20.11-0ubuntu27.132.20.11-0ubuntu27.14 |
2.20.11-0ubuntu27.16 |
apportUbuntu:16.04:LTS From an advisory covering 3 CVEs |
before 2.20.1-0ubuntu2.30, plus listed versions 2.19.1-0ubuntu32.19.2-0ubuntu12.19.2-0ubuntu22.19.2-0ubuntu32.19.2-0ubuntu4 Show 37 moreShow less2.19.2-0ubuntu52.19.2-0ubuntu62.19.2-0ubuntu82.19.2-0ubuntu92.19.3-0ubuntu12.19.3-0ubuntu22.19.3-0ubuntu32.19.4-0ubuntu12.19.4-0ubuntu22.20-0ubuntu22.20-0ubuntu32.20.1-0ubuntu12.20.1-0ubuntu22.20.1-0ubuntu2.12.20.1-0ubuntu2.22.20.1-0ubuntu2.42.20.1-0ubuntu2.52.20.1-0ubuntu2.62.20.1-0ubuntu2.92.20.1-0ubuntu2.102.20.1-0ubuntu2.122.20.1-0ubuntu2.132.20.1-0ubuntu2.142.20.1-0ubuntu2.152.20.1-0ubuntu2.162.20.1-0ubuntu2.172.20.1-0ubuntu2.182.20.1-0ubuntu2.192.20.1-0ubuntu2.202.20.1-0ubuntu2.212.20.1-0ubuntu2.222.20.1-0ubuntu2.232.20.1-0ubuntu2.242.20.1-0ubuntu2.252.20.1-0ubuntu2.262.20.1-0ubuntu2.272.20.1-0ubuntu2.28 |
2.20.1-0ubuntu2.30 |
apportUbuntu:18.04:LTS From an advisory covering 3 CVEs |
before 2.20.9-0ubuntu7.23, plus listed versions 2.20.7-0ubuntu32.20.7-0ubuntu3.12.20.7-0ubuntu42.20.8-0ubuntu12.20.8-0ubuntu2 Show 34 moreShow less2.20.8-0ubuntu32.20.8-0ubuntu42.20.8-0ubuntu52.20.8-0ubuntu62.20.8-0ubuntu72.20.8-0ubuntu82.20.8-0ubuntu92.20.8-0ubuntu102.20.9-0ubuntu12.20.9-0ubuntu22.20.9-0ubuntu42.20.9-0ubuntu52.20.9-0ubuntu62.20.9-0ubuntu72.20.9-0ubuntu7.12.20.9-0ubuntu7.22.20.9-0ubuntu7.32.20.9-0ubuntu7.42.20.9-0ubuntu7.52.20.9-0ubuntu7.62.20.9-0ubuntu7.72.20.9-0ubuntu7.82.20.9-0ubuntu7.92.20.9-0ubuntu7.112.20.9-0ubuntu7.122.20.9-0ubuntu7.132.20.9-0ubuntu7.142.20.9-0ubuntu7.152.20.9-0ubuntu7.162.20.9-0ubuntu7.172.20.9-0ubuntu7.182.20.9-0ubuntu7.192.20.9-0ubuntu7.202.20.9-0ubuntu7.21 |
2.20.9-0ubuntu7.23 |
apportUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 2.20.11-0ubuntu27.16, plus listed versions 2.20.11-0ubuntu82.20.11-0ubuntu92.20.11-0ubuntu132.20.11-0ubuntu142.20.11-0ubuntu15 Show 22 moreShow less2.20.11-0ubuntu162.20.11-0ubuntu172.20.11-0ubuntu182.20.11-0ubuntu192.20.11-0ubuntu202.20.11-0ubuntu212.20.11-0ubuntu222.20.11-0ubuntu242.20.11-0ubuntu252.20.11-0ubuntu262.20.11-0ubuntu272.20.11-0ubuntu27.22.20.11-0ubuntu27.32.20.11-0ubuntu27.42.20.11-0ubuntu27.62.20.11-0ubuntu27.82.20.11-0ubuntu27.92.20.11-0ubuntu27.102.20.11-0ubuntu27.112.20.11-0ubuntu27.122.20.11-0ubuntu27.132.20.11-0ubuntu27.14 |
2.20.11-0ubuntu27.16 |
apportUbuntu:Pro:14.04:LTS From an advisory covering 3 CVEs |
before 2.14.1-0ubuntu3.29+esm6, plus listed versions 2.12.5-0ubuntu22.12.6-0ubuntu12.12.7-0ubuntu12.12.7-0ubuntu22.12.7-0ubuntu3 Show 42 moreShow less2.12.7-0ubuntu62.13.1-0ubuntu12.13.1-0ubuntu22.13.2-0ubuntu22.13.2-0ubuntu32.13.2-0ubuntu42.13.2-0ubuntu52.13.3-0ubuntu12.14-0ubuntu12.14.1-0ubuntu12.14.1-0ubuntu22.14.1-0ubuntu32.14.1-0ubuntu3.12.14.1-0ubuntu3.22.14.1-0ubuntu3.32.14.1-0ubuntu3.42.14.1-0ubuntu3.52.14.1-0ubuntu3.62.14.1-0ubuntu3.72.14.1-0ubuntu3.82.14.1-0ubuntu3.92.14.1-0ubuntu3.102.14.1-0ubuntu3.112.14.1-0ubuntu3.122.14.1-0ubuntu3.132.14.1-0ubuntu3.152.14.1-0ubuntu3.162.14.1-0ubuntu3.182.14.1-0ubuntu3.192.14.1-0ubuntu3.202.14.1-0ubuntu3.212.14.1-0ubuntu3.232.14.1-0ubuntu3.242.14.1-0ubuntu3.252.14.1-0ubuntu3.272.14.1-0ubuntu3.282.14.1-0ubuntu3.292.14.1-0ubuntu3.29+esm12.14.1-0ubuntu3.29+esm22.14.1-0ubuntu3.29+esm32.14.1-0ubuntu3.29+esm42.14.1-0ubuntu3.29+esm5 |
2.14.1-0ubuntu3.29+esm6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-25682 is a high vulnerability (CVSS 8.8) in Canonical Apport, published February 2, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in apport 2.14.1-0ubuntu3.29+esm6.
References
bugs.launchpad.net/ubuntu/+source/apport/+bug/1912326
nvd.nist.gov/vuln/detail/CVE-2021-25682
github.com/advisories/GHSA-7398-g2qh-pr9p
ubuntu.com/security/CVE-2021-25682
cve.org/CVERecord?id=CVE-2021-25682