Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-28652

~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

Published

2024-06-04T22:15:09.780

Last Modified

2025-03-13T19:15:38.803

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-776
  • Type: Secondary
    CWE-776
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apport_project apport < 2.21.0 Yes
Operating System canonical ubuntu_linux 18.04 Yes
Operating System canonical ubuntu_linux 20.04 Yes
Operating System canonical ubuntu_linux 21.10 Yes
Operating System canonical ubuntu_linux 22.04 Yes
References