Vulnerabilities > Whoopsie Project

DATE CVE VULNERABILITY TITLE RISK
2020-07-06 CVE-2020-15570 Allocation of Resources Without Limits or Throttling vulnerability in Whoopsie Project Whoopsie
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.
local
low complexity
whoopsie-project CWE-770
5.5
2020-04-24 CVE-2020-12135 Integer Overflow or Wraparound vulnerability in multiple products
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values.
local
low complexity
whoopsie-project mongodb CWE-190
5.5
2020-02-08 CVE-2019-11484 Integer Overflow or Wraparound vulnerability in multiple products
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
local
low complexity
whoopsie-project canonical CWE-190
7.8