EUVD-2021-12574

Malware in sbrugna...

SUSE CVE-2021-25682

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

CVE-2021-25682

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

CVE-2021-25682 apport improperly parses /proc/pid/status

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

CVE-2021-25682: Improper Input Validation

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

CVE-2019-15790: Execution with Unnecessary Privileges

Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through getpidinfo in data/apport. An unprivileged user could exploit this to read information about a privileged...

CVE-2019-15790

Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through getpidinfo in data/apport. An unprivileged user could exploit this to read information about a privileged...