5.5
Medium
CVE-2022-28658 Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
Description
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apport 2.21 | earliest → < 2.21.0 | 2.21.0 |
References
- ubuntu.com ubuntu.com
- www.cve.org www.cve.org
Timeline
- Published
- Last modified
Other CVEs of Apport
The 11 CVEs of Apport →
CVE-2020-11936
gdbus setgid privilege escalation
3.1
Low
CVE-2022-28653
Users can consume unlimited disk space in /var/crash
7.5
High
CVE-2022-28657
Apport does not disable python crash handler before entering chroot
7.8
High
CVE-2022-28656
is_closing_session() allows users to consume RAM in the Apport process
5.5
Medium