CVE-2022-28658

2024-06-0422:03:53

canonical

github.com

cve-2022-28658

apport

argument parsing

filename splitting

older kernels

argument spoofing

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

CNA Affected

[
  {
    "repo": "https://github.com/canonical/apport",
    "vendor": "Canonical Ltd.",
    "product": "Apport",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.21.0",
        "versionType": "semver"
      }
    ],
    "platforms": [
      "Linux"
    ],
    "packageName": "apport"
  }
]