vulnerability

Ubuntu: USN-4170-2: Whoopsie regression

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Oct 30, 2019
Added
Oct 31, 2019
Modified
Feb 19, 2025

Description


USN-4170-1 fixed a vulnerability in Whoopsie. The update caused Whoopsie to crash when sending reports. This update fixes the problem.


We apologize for the inconvenience.


Original advisory details:


Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute code as the whoopsie user.

Solutions

ubuntu-upgrade-libwhoopsie0ubuntu-upgrade-whoopsie
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.