5.5
Medium
CVE-2022-28652 ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
Description
~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apport 2.21 | earliest → < 2.21.0 | 2.21.0 |
Other CVEs of Apport
The 11 CVEs of Apport →
CVE-2020-11936
gdbus setgid privilege escalation
3.1
Low
CVE-2022-28653
Users can consume unlimited disk space in /var/crash
7.5
High
CVE-2022-28658
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
5.5
Medium
CVE-2022-28657
Apport does not disable python crash handler before entering chroot
7.8
High