CVE-2022-28658

6 documents5 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 88.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Canonical Ltd. ApportApport Project ApportCanonical Ubuntu Linux
Timeline
PublishedJun 4
Latest updateJul 11

Description

Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5canonical_ltd./apport< 2.21.0
▶NVDapport_project/apport< 2.21.0
▶Ubuntuapport< 2.20.9-0ubuntu7.28+3

Also affects: Ubuntu Linux 18.04, 20.04, 21.10, 22.04

🔴Vulnerability Details

3
GHSA
GHSA-4pgv-p58j-ghpx: Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing↗2024-06-05
▶
CVEList
CVE-2022-28658: Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing↗2024-06-04
▶
OSV
CVE-2022-28658: Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing↗2022-05-17
▶

📋Vendor Advisories

2
Ubuntu
Apport vulnerabilities↗2024-07-11
▶
Ubuntu
Apport vulnerabilities↗2022-05-17
▶
CVE-2022-28658 (MEDIUM CVSS 5.5) | Apport argument parsing mishandles | cvebase.io