Whoopsie Project Whoopsie vulnerabilities

3 vulnerabilities

Known vulnerabilities in Whoopsie Project Whoopsie, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2020-15570ubuntuwhoopsie+1
EPSS score
1.08%
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.5.5CVE-2020-12135debianduo-unix+4
EPSS score
1.17%
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.7.8CVE-2019-11484canonicalubuntu_linux+4
EPSS score
0.44%
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.