7.8
Élevée
CVE-2022-1242 Apport can be tricked into connecting to arbitrary sockets as the root user
Description
Apport can be tricked into connecting to arbitrary sockets as the root user
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apport 2.21 | premières → < 2.21.0 | 2.21.0 |
Autres CVE de Apport
Les 11 CVE de Apport →
CVE-2020-11936
gdbus setgid privilege escalation
3.1
Faible
CVE-2022-28653
Users can consume unlimited disk space in /var/crash
7.5
Élevée
CVE-2022-28658
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
5.5
Moyenne
CVE-2022-28657
Apport does not disable python crash handler before entering chroot
7.8
Élevée