USN-4170-1 — whoopsie vulnerability

Summary

Kevin Backhouse discovered Whoopsie incorrectly handled very large crash
reports. A local attacker could possibly use this issue to cause a denial
of service, expose sensitive information or execute code as the whoopsie
user.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	whoopsie	0.2.52.5ubuntu0.2
Ubuntu · 18.04 LTS 18.04:LTS	whoopsie	0.2.62ubuntu0.2

Vulnerabilities 1

Medium 6.3

CVE-2019-11484

Integer overflow in bson_ensure_space

Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.

Canonical whoopsie whoopsie duo-unix Ubuntu

Feb 8, 2020

References

report
https://ubuntu.com/security/CVE-2019-11484

whoopsie vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

Integer overflow in bson_ensure_space

References