Search CVE reports
1 – 6 of 6 results
CVE-2020-15570
Medium prioritySome fixes available 3 of 4
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.
1 affected packages
whoopsie
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
whoopsie | — | — | Fixed | Fixed | Fixed |
CVE-2020-11937
Medium prioritySome fixes available 3 of 4
In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and...
1 affected packages
whoopsie
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
whoopsie | — | — | Fixed | Fixed | Fixed |
CVE-2020-12135
Medium prioritySome fixes available 11 of 24
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.
2 affected packages
duo-unix, whoopsie
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
duo-unix | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
whoopsie | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2012-0945
Medium prioritywhoopsie-daisy before 0.1.26: Root user can remove arbitrary files
1 affected packages
whoopsie-daisy
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
whoopsie-daisy | — | — | — | — | — |
CVE-2019-11484
Medium prioritySome fixes available 13 of 26
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
2 affected packages
duo-unix, whoopsie
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
duo-unix | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
whoopsie | Fixed | Fixed | Fixed | Fixed | Fixed |
CVE-2019-11476
Medium priorityAn integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash...
1 affected packages
whoopsie
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
whoopsie | — | — | — | Fixed | Fixed |