CVE-2022-28656

moderate-risk

Published 2024-06-04

is_closing_session() allows users to consume RAM in the Apport process

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Apport

Ubuntu Linux

Canonical Apport Project

Third Party Advisory https://ubuntu.com/security/notices/USN-5427-1

Third Party Advisory https://www.cve.org/CVERecord?id=CVE-2022-28656

Third Party Advisory https://ubuntu.com/security/notices/USN-5427-1

Third Party Advisory https://www.cve.org/CVERecord?id=CVE-2022-28656

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 12/34 · Low