CVE-2022-28652

CVE-2022-28652 affects the Apport component, specifically ~/.config/apport/settings parsing. The vulnerability is described as a parsing issue (billion laughs) with local attack vector and a high availability impact in the NVD metrics. The connected records confirm affected product/area and the u...

CVE-2022-28658

CVE-2022-28658 concerns the Apport component of Ubuntu/Linux, where argument parsing mishandles filename splitting on older kernels, enabling local argument spoofing to the Apport daemon. The issue affects Apport’s handling of certain filenames and command-line arguments, with the published CVSS ...

CVE-2022-28655

CVE-2022-28655 affects the Apport component on Linux/Ubuntu, where is_closing_session() allows a local user to create arbitrary TCP D-Bus connections. The available documents describe a local attack surface with potential integrity and availability impact (I: High, A: High) while confidentiality ...

CVE-2017-14179

CVE-2017-14179 affects Apport before 2.13. The issue stems from how crashes originating in a PID namespace are handled, allowing a local attacker to create files as root, which can be used to cause a denial of service via resource exhaustion and potentially gain root privileges or escape from con...

CVE-2022-28657

CVE-2022-28657 concerns Apport, where the Python crash handler is not disabled before chroot, enabling a local attacker to exploit the issue. The vulnerability is described across multiple advisories (e.g., Ubuntu USN-6894-1) and related Nessus/OSV entries, all referencing the same root cause: Ap...

CVE-2022-28656

CVE-2022-28656 affects the Apport component in Ubuntu-derived environments. The vulnerability is described as: when is_closing_session() runs, it allows local users to consume RAM in the Apport process, which can lead to a local denial of service. The issue is disclosed and tracked across multipl...

CVE-2022-28654

CVE-2022-28654 concerns the Apport component in Linux/Ubuntu. The is_closing_session() path allows an attacker to fill the apport.log, causing a denial of service or local resource exhaustion as described in multiple advisories. The vulnerability is locally exploitable with low privileges and doe...