fr Sign in

7.8 High

CVE-2022-28657 Apport does not disable python crash handler before entering chroot

Description

Apport does not disable python crash handler before entering chroot

Affected products and versions

Product	Affected versions	Fixed in
Apport 2.21	earliest → < 2.21.0	2.21.0
apport 2.21	earliest → < 2.21.0	2.21.0

References

ubuntu.com ubuntu.com
www.cve.org www.cve.org

Timeline

Published June 4, 2024
Last modified August 3, 2024

The 11 CVEs of Apport →

CVE-2020-11936 gdbus setgid privilege escalation 3.1 Low CVE-2022-28653 Users can consume unlimited disk space in /var/crash 7.5 High CVE-2022-28658 Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing 5.5 Medium CVE-2022-28656 is_closing_session() allows users to consume RAM in the Apport process 5.5 Medium

Track this CVE