Canonical Whoopsie vulnerabilities

2 vulnerabilities

Known vulnerabilities in Canonical Whoopsie, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2020-11937canonicalwhoopsie+1
EPSS score
0.47%
In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.7.8CVE-2019-11484canonicalubuntu_linux+4
EPSS score
0.44%
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.