Vulnerabilities > CVE-2020-11937 - Memory Leak vulnerability in Canonical Whoopsie

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

canonical

CWE-401

NVD

Published: 2020-08-06

Updated: 2024-11-21

Summary

In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.

Vulnerable Configurations

Part	Description	Count
Application	Canonical Canonical Whoopsie 0.2.66 Canonical Whoopsie 0.2.67 Canonical Whoopsie 0.2.68 Canonical Whoopsie 0.2.69 Canonical Whoopsie 0.2.49 Canonical Whoopsie 0.2.50 Canonical Whoopsie 0.2.51 Canonical Whoopsie 0.2.52 Canonical Whoopsie 0.2.52.1 Canonical Whoopsie 0.2.52.2 Canonical Whoopsie 0.2.52.3 Canonical Whoopsie 0.2.52.4 Canonical Whoopsie 0.2.52.5 Canonical Whoopsie 0.2.52.5Ubuntu0.1 Canonical Whoopsie 0.2.52.5Ubuntu0.2 Canonical Whoopsie 0.2.52.5Ubuntu0.3 Canonical Whoopsie 0.2.52.5Ubuntu0.4 Canonical Whoopsie 0.2.58 Canonical Whoopsie 0.2.59 Canonical Whoopsie 0.2.59Build1 Canonical Whoopsie 0.2.60 Canonical Whoopsie 0.2.61 Canonical Whoopsie 0.2.62 Canonical Whoopsie 0.2.62Ubuntu0.1 Canonical Whoopsie 0.2.62Ubuntu0.2 Canonical Whoopsie 0.2.62Ubuntu0.3 Canonical Whoopsie 0.2.62Ubuntu0.4	27
OS	Canonical Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04	3

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References