Whoopsie Project Whoopsie vulnerabilities

CVE-2020-11937 [MEDIUM] whoopsie vulnerabilities whoopsie vulnerabilities Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to consume memory, resulting in a denial of service. (CVE-2020-11937) Seong-Joong Kim discovered that Whoopsie incorrectly handled parsing files. A local attacker could use this issue to cause Whoopsie to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-12135)

CVE-2020-15570 [MEDIUM] CWE-770 CVE-2020-15570: The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation fa The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.

CVE-2020-12135 [MEDIUM] CWE-190 CVE-2020-12135: bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return v bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.

CVE-2019-11484 [HIGH] CVE-2019-11484: Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.

CVE-2019-11476 [HIGH] CVE-2019-11476: An integer overflow in whoopsie before versions 0 An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in the context of the whoopsie process.