CVE-2022-28654

moderate-risk

Published 2024-06-04

is_closing_session() allows users to fill up apport.log

Do I need to act?

0.05% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Apport

Ubuntu Linux

Canonical Apport Project

Third Party Advisory https://ubuntu.com/security/notices/USN-5427-1

Third Party Advisory https://www.cve.org/CVERecord?id=CVE-2022-28654

Third Party Advisory https://ubuntu.com/security/notices/USN-5427-1

Third Party Advisory https://www.cve.org/CVERecord?id=CVE-2022-28654

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 12/34 · Low