CVE-2022-28652

Summary

~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://ubuntu.com/security/notices/USN-5427-1
• https://www.cve.org/CVERecord?id=CVE-2022-28652

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://ubuntu.com/security/notices/USN-5427-1
• https://www.cve.org/CVERecord?id=CVE-2022-28652

• ←Previous
• Next→