CVE-2020-11937

Description

In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.

Weakness classification

• CWE-400: Uncontrolled Resource Consumption
• CWE-401: Missing Release of Memory after Effective Lifetime

Primary references

• security@ubuntu.com — Exploit, Third Party Advisory
• security@ubuntu.com — Exploit, Issue Tracking, Third Party Advisory
• security@ubuntu.com — Vendor Advisory
• security@ubuntu.com — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory