CVE-2022-28658

moderate-risk

Published 2024-06-04

Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Apport

Ubuntu Linux

Canonical Apport Project

Third Party Advisory https://ubuntu.com/security/notices/USN-5427-1

Third Party Advisory https://www.cve.org/CVERecord?id=CVE-2022-28658

Third Party Advisory https://ubuntu.com/security/notices/USN-5427-1

Third Party Advisory https://www.cve.org/CVERecord?id=CVE-2022-28658

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 12/34 · Low