Lucene search
Ubuntu.comUB:CVE-2022-28652HistoryMay 17, 2022 - 12:00 a.m.
CVE-2022-28652
2022-05-1700:00:00
ubuntu.com
ubuntu.com
11
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.0%
~/.config/apport/settings parsing is vulnerable to “billion laughs” attack
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | apport | < 2.20.9-0ubuntu7.28 | UNKNOWN |
| ubuntu | 20.04 | noarch | apport | < 2.20.11-0ubuntu27.24 | UNKNOWN |
| ubuntu | 21.10 | noarch | apport | < 2.20.11-0ubuntu71.2 | UNKNOWN |
| ubuntu | 22.04 | noarch | apport | < 2.20.11-0ubuntu82.1 | UNKNOWN |
| ubuntu | 22.10 | noarch | apport | < 2.21.0-0ubuntu1 | UNKNOWN |
| ubuntu | 23.04 | noarch | apport | < 2.21.0-0ubuntu1 | UNKNOWN |
| ubuntu | 23.10 | noarch | apport | < 2.21.0-0ubuntu1 | UNKNOWN |
| ubuntu | 24.04 | noarch | apport | < 2.21.0-0ubuntu1 | UNKNOWN |
| ubuntu | 14.04 | noarch | apport | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | apport | < any | UNKNOWN |
Related
cvelist
cvelist
CVE-2022-28652
2024-06-04 21:38:44
nvd
nvd
CVE-2022-28652
2024-06-04 22:15:09
cve
cve
CVE-2022-28652
2024-06-04 22:15:09
osv
osv
apport vulnerabilities
2022-05-17 16:38:36
ubuntu
ubuntu
Apport vulnerabilities
2022-05-17 00:00:00
nessus
nessus
openvas
openvas
Ubuntu: Security Advisory (USN-5427-1)
2022-05-18 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.0%
Related for UB:CVE-2022-28652