Skip to content
OpenAdvisories
Medium USN-4052-1 1 CVE

whoopsie vulnerability

Published Jul 9, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Kevin Backhouse discovered Whoopsie incorrectly handled very large crash
reports. A local attacker could possibly use this issue to cause a denial of
service or expose sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS whoopsie 0.2.52.5ubuntu0.1
Ubuntu · 18.04 LTS 18.04:LTS whoopsie 0.2.62ubuntu0.1

Vulnerabilities 1

  • Medium 6.5
    CVE-2019-11476

    Integer overflow in whoopsie results in out-of-bounds heap write

    An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in …

    Ubuntu Whoopsie whoopsie Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-11476