705 matches found
Ubuntu: Security Advisory (USN-5427-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-28657
Apport does not disable python crash handler before entering chroot...
UBUNTU-CVE-2022-28658
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing...
CVE-2022-1242
Apport can be tricked into connecting to arbitrary sockets as the root user...
CVE-2022-28656
isclosingsession allows users to consume RAM in the Apport process...
UBUNTU-CVE-2022-28657
Apport does not disable python crash handler before entering chroot...
CVE-2022-28658
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing...
UBUNTU-CVE-2022-1242
Apport can be tricked into connecting to arbitrary sockets as the root user...
UBUNTU-CVE-2022-28652
/.config/apport/settings parsing is vulnerable to "billion laughs" attack...
UBUNTU-CVE-2022-28656
isclosingsession allows users to consume RAM in the Apport process...
UBUNTU-CVE-2022-28654
isclosingsession allows users to fill up apport.log...
USN-5427-1: Apport vulnerabilities
Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2021-3899 Gerrit Venema discovered that Apport incorrectly handled connections to...
USN-5427-1 apport vulnerabilities
Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2021-3899 Gerrit Venema discovered that Apport incorrectly handled connections to...
Canonical Apport 资源管理错误漏洞
Canonical Apport is a toolkit from Canonical UK that collects and provides feedback on error messages information that the operating system considers useful when an application crashes. A resource management error vulnerability exists in Canonical Apport, which arises from the application not...
Canonical Apport 安全特征问题漏洞
Canonical Apport is a toolkit from Canonical UK that collects and provides feedback on error messages information that the operating system considers useful when an application crashes. Canonical Apport suffers from a security signature issue vulnerability that stems from not filtering D-Bus...
PT-2022-19146 · Canonical +1 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue allows users to consume RAM in the Apport process through the is closing session function. Recommendations: At the moment, there is no information about a newer version that contai...
PT-2022-19147 · Apport +2 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue is related to Apport not disabling the python crash handler before entering chroot. This could potentially lead to unintended consequences, although specific details about the impa...
PT-2022-13742 · Canonical +1 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue allows Apport to be tricked into connecting to arbitrary sockets as the root user. Recommendations: At the moment, there is no information about a newer version that contains a fix...
Canonical Apport 安全特征问题漏洞
Canonical Apport is a toolkit from Canonical UK for collecting and feeding back error messages information that the operating system finds useful when an application crashes. A security signature issue vulnerability exists in Canonical Apport that stems from incorrectly handling connections to...
PT-2022-19148 · Apport +2 · Apport +2
Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue is related to Apport argument parsing, which mishandles filename splitting on older kernels, resulting in argument spoofing. Recommendations: At the moment, there is no information...