74 matches found
EUVD-2020-4274
Malware in sbrugna...
EUVD-2012-0968
Malware in sbrugna...
EUVD-2019-3149
Malware in sbrugna...
EUVD-2019-3157
Malware in sbrugna...
EUVD-2021-19402
Malware in sbrugna...
EUVD-2020-7557
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-11484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kevin Backhouse discovered an integer overflow in bsonensurespace, as used in whoopsie. CVE-2019-11484 Note that Nessus relies on the presence of the package as...
CVE-2020-15570
The parsereport function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file...
CVE-2012-0945
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...
SUSE CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
Code injection
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
CVE-2021-32557
CVE-2021-32557 fixes a vulnerability in Ubuntu Apport where process_report() in data/whoopsie-upload-all could write arbitrary files via symlinks. The CVSSv3.1 vector (LOCAL, LOW to MEDIUM/LOW privileges, I and A HIGH) points to a LOCAL attack with high impact on integrity and availability. Affec...
CVE-2021-32557 apport process_report() arbitrary file write
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
UBUNTU-CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
Arbitrary Code Execution
whoopsie is vulnerable to arbitrary code execution. An integer overflow in bsonensurespace allows an attacker to execute arbitrary code on the host OS...
The vulnerability of the parse_report() function in the whoopsie error logging service allows a violator to trigger a service failure.
The vulnerability of the parsereport function in the whoopsie error reporting service is related to unlimited resource distribution. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the parse_report() function in the whoopsie error logging service allows a violator to trigger a service failure.
The vulnerability of the parsereport function in the whoopsie error reporting service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure using a specially crafted file...
CVE-2020-11937
In whoopsie, parsereport from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1...