Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Whoopsie vulnerabilities (USN-4450-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4450-1 advisory. Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to...

CVE-2020-15570

CVE-2020-15570 affects Whoopsie’s parse_report() in whoopsie.c through version 0.2.69, where mishandling of memory allocation failures can cause a denial of service via a malformed crash file. The issue’s root cause is memory allocation handling in parse_report(); no other technical details (e.g....