70 matches found
EUVD-2021-19402
Malware in sbrugna...
EUVD-2019-3149
Malware in sbrugna...
EUVD-2019-3157
Malware in sbrugna...
EUVD-2020-7557
Malware in sbrugna...
EUVD-2012-0968
Malware in sbrugna...
EUVD-2020-4274
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-11484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kevin Backhouse discovered an integer overflow in bsonensurespace, as used in whoopsie. CVE-2019-11484 Note that Nessus relies on the presence of the package as...
CVE-2020-15570
The parsereport function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file...
CVE-2012-0945
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...
SUSE CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
Code injection
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
CVE-2021-32557 apport process_report() arbitrary file write
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
CVE-2021-32557
CVE-2021-32557 fixes a vulnerability in Ubuntu Apport where process_report() in data/whoopsie-upload-all could write arbitrary files via symlinks. The CVSSv3.1 vector (LOCAL, LOW to MEDIUM/LOW privileges, I and A HIGH) points to a LOCAL attack with high impact on integrity and availability. Affec...
UBUNTU-CVE-2021-32557
It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...
Arbitrary Code Execution
whoopsie is vulnerable to arbitrary code execution. An integer overflow in bsonensurespace allows an attacker to execute arbitrary code on the host OS...
CVE-2020-11937
In whoopsie, parsereport from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1...
CVE-2020-11937
In whoopsie, parsereport from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1...
CVE-2020-11937 Resource exhaustion vulnerability in whoopsie
In whoopsie, parsereport from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1...