CVE-2020-15570

The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
VendorProductVersion
whoopsie_projectwhoopsie
𝑥
≤ 0.2.69
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
whoopsie
focal
Fixed 0.2.69ubuntu0.1
released
eoan
ignored
bionic
Fixed 0.2.62ubuntu0.5
released
xenial
Fixed 0.2.52.5ubuntu0.5
released
trusty
dne
Common Weakness Enumeration
References
https://github.com/sungjungk/whoopsie_killer2/blob/master/README.md
https://github.com/sungjungk/whoopsie_killer2/blob/master/whoopsie_killer2.py
https://launchpad.net/ubuntu/+source/whoopsie
https://usn.ubuntu.com/4450-1/
https://www.youtube.com/watch?v=oZXGwC7PWYE
https://github.com/sungjungk/whoopsie_killer2/blob/master/README.md
https://github.com/sungjungk/whoopsie_killer2/blob/master/whoopsie_killer2.py
https://launchpad.net/ubuntu/+source/whoopsie
https://usn.ubuntu.com/4450-1/
https://www.youtube.com/watch?v=oZXGwC7PWYE