CVE-2021-3899

Published: 17 May 2022

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.

Priority

Status

Package	Release	Status
apport Launchpad, Ubuntu, Debian	bionic	Released (2.20.9-0ubuntu7.28)
	focal	Released (2.20.11-0ubuntu27.24)
	hirsute	Ignored (reached end-of-life)
	impish	Released (2.20.11-0ubuntu71.2)
	jammy	Released (2.20.11-0ubuntu82.1)
	trusty	Needed
	upstream	Needed
	xenial	Needed

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3899
https://ubuntu.com/security/notices/USN-5427-1
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

CVE-2021-3899

Medium

Status

References

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading