EUVD-2020-4274

Malware in sbrugna...

EUVD-2019-3157

Malware in sbrugna...

EUVD-2019-3149

Malware in sbrugna...

EUVD-2021-19402

Malware in sbrugna...

EUVD-2012-0968

Malware in sbrugna...

EUVD-2020-7557

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-11484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kevin Backhouse discovered an integer overflow in bsonensurespace, as used in whoopsie. CVE-2019-11484 Note that Nessus relies on the presence of the package as...

CVE-2020-15570

The parsereport function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file...

CVE-2012-0945

whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...

SUSE CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

Code injection

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557 apport process_report() arbitrary file write

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557

CVE-2021-32557 fixes a vulnerability in Ubuntu Apport where process_report() in data/whoopsie-upload-all could write arbitrary files via symlinks. The CVSSv3.1 vector (LOCAL, LOW to MEDIUM/LOW privileges, I and A HIGH) points to a LOCAL attack with high impact on integrity and availability. Affec...

CVE-2021-32557: Improper Link Resolution Before File Access

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

UBUNTU-CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

Arbitrary Code Execution

whoopsie is vulnerable to arbitrary code execution. An integer overflow in bsonensurespace allows an attacker to execute arbitrary code on the host OS...