| CVE-2020-11936 |
gdbus setgid privilege escalation
|
3.1
Faible
|
31 janv. 2025 |
| CVE-2022-28653 |
Users can consume unlimited disk space in /var/crash
|
7.5
Élevée
|
31 janv. 2025 |
| CVE-2022-28658 |
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
|
5.5
Moyenne
|
4 juin 2024 |
| CVE-2022-28657 |
Apport does not disable python crash handler before entering chroot
|
7.8
Élevée
|
4 juin 2024 |
| CVE-2022-28656 |
is_closing_session() allows users to consume RAM in the Apport process
|
5.5
Moyenne
|
4 juin 2024 |
| CVE-2022-28655 |
is_closing_session() allows users to create arbitrary tcp dbus connections
|
7.1
Élevée
|
4 juin 2024 |
| CVE-2022-28654 |
is_closing_session() allows users to fill up apport.log
|
5.5
Moyenne
|
4 juin 2024 |
| CVE-2022-28652 |
~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
|
5.5
Moyenne
|
4 juin 2024 |
| CVE-2022-1242 |
Apport can be tricked into connecting to arbitrary sockets as the root user
|
7.8
Élevée
|
3 juin 2024 |
| CVE-2021-3899 |
There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an…
|
7.8
Élevée
|
3 juin 2024 |
| CVE-2023-1326 |
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604
|
7.7
Élevée
|
13 avr. 2023 |