CVE-2021-3709

Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3;

• CWE-538
• CWE-22

• https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1934308Exploit, Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3709Third Party Advisory
• https://ubuntu.com/security/notices/USN-5077-1Vendor Advisory
• https://ubuntu.com/security/notices/USN-5077-2Vendor Advisory
• https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1934308Exploit, Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3709Third Party Advisory
• https://ubuntu.com/security/notices/USN-5077-1Vendor Advisory
• https://ubuntu.com/security/notices/USN-5077-2Vendor Advisory

Published

Oct 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37084There is a Improper Input Validation vulnerability in Huawei…9.8
• CVE-2021-37085There is a Encoding timing vulnerability in Huawei Smartphon…5.9
• CVE-2021-37086There is a Improper Preservation of Permissions vulnerabilit…8.6
• CVE-2021-37087There is a Path Traversal vulnerability in Huawei Smartphone…9.1
• CVE-2021-37088There is a Path Traversal vulnerability in Huawei Smartphone…9.1
• CVE-2021-37089There is a Incomplete Cleanup vulnerability in Huawei Smartp…7.5
• CVE-2021-37090There is a Out-of-bounds Read vulnerability in Huawei Smartp…7.5
• CVE-2021-37091There is a Permissions,Privileges,and Access Controls vulner…7.5
• CVE-2021-37092There is a Incomplete Cleanup vulnerability in Huawei Smartp…7.5
• CVE-2021-37093There is a Improper Access Control vulnerability in Huawei S…5.3
• CVE-2021-37094There is a Improper Input Validation vulnerability in Huawei…7.5
• CVE-2021-37095There is a Integer Overflow or Wraparound vulnerability in H…9.8