6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
35.3%
An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in the context of the whoopsie process.
[
{
"vendor": "Ubuntu",
"product": "Whoopsie",
"versions": [
{
"version": "before 0.2.52.5ubuntu0.1",
"status": "affected"
},
{
"version": "before 0.2.62ubuntu0.1",
"status": "affected"
},
{
"version": "before 0.2.64ubuntu0.1",
"status": "affected"
},
{
"version": "before 0.2.66",
"status": "affected"
}
]
}
]