CVE-2022-28652

~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@ubuntu.com

Published

2024-06-04

Last modified

2025-03-13

Weaknesses

CWE-776

Affected products

• Apport (Apport Project)
• Ubuntu Linux (Canonical)
• Apport (Canonical Ltd.)

References

• https://ubuntu.com/security/notices/USN-5427-1
• https://www.cve.org/CVERecord?id=CVE-2022-28652