CVE-2022-28657

Mô tả

Tham khảo

• ubuntu.com/security/notices/USN-5427-1 · Third Party Advisory
• cve.org/CVERecord · Third Party Advisory

Lỗ hổng khác của apport

• CVE-2022-28658TRUNG BÌNH 5.5Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
• CVE-2022-28656TRUNG BÌNH 5.5is_closing_session() allows users to consume RAM in the Apport process
• CVE-2022-28655CAO 7.1is_closing_session() allows users to create arbitrary tcp dbus connections
• CVE-2022-28654TRUNG BÌNH 5.5is_closing_session() allows users to fill up apport.log
• CVE-2022-28652TRUNG BÌNH 5.5~/.config/apport/settings parsing is vulnerable to "billion laughs" attack