Skip to main content

Apport CVE-2022-28653

HIGH
2025-01-31 security@ubuntu.com
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE
HIGH
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Patch released
Apr 01, 2026 - 08:30 nvd
Patch available
Analysis Generated
Mar 28, 2026 - 18:06 vuln.today
CVE Published
Jan 31, 2025 - 01:15 nvd
HIGH 7.5

DescriptionCVE.org

Users can consume unlimited disk space in /var/crash

AnalysisAI

Users can consume unlimited disk space in /var/crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

Affected products include: Canonical Apport.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Apport

View all
CVE-2015-1318 HIGH POC
7.2 Apr 17

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

CVE-2016-9949 HIGH POC
7.8 Dec 17

An issue was discovered in Apport before 2.20.4. Rated high severity (CVSS 7.8), this vulnerability is no authentication

CVE-2016-9951 MEDIUM POC
6.5 Dec 17

An issue was discovered in Apport before 2.20.4. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploi

CVE-2016-9950 HIGH POC
7.8 Dec 17

An issue was discovered in Apport before 2.20.4. Rated high severity (CVSS 7.8), this vulnerability is no authentication

CVE-2021-25684 HIGH POC
7.8 Jun 11

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO. Rat

CVE-2021-25683 HIGH POC
7.8 Jun 11

It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from t

CVE-2021-25682 HIGH POC
7.8 Jun 11

It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from

CVE-2015-1338 HIGH POC
7.2 Oct 01

kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly ga

CVE-2021-32557 HIGH POC
7.1 Jun 12

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symli

CVE-2019-7307 HIGH POC
7.0 Aug 29

Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubu

CVE-2021-3710 MEDIUM POC
5.5 Oct 01

An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). Rated medium se

CVE-2021-3709 MEDIUM POC
5.5 Oct 01

Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 11 SP2 Fixed
SUSE Linux Enterprise Desktop 11 SP2 Fixed
SUSE Linux Enterprise Desktop 11 SP3 Fixed
SUSE Linux Enterprise Desktop 11 SP3 Fixed
SUSE Linux Enterprise Desktop 11 SP4 Fixed

Share

CVE-2022-28653 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy