Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2841▼ 157 respecto a la semana anterior

Críticas / altas1370▲ 51 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-11937	Modificada	Media (5.5)	0.47%	—	Canonical Whoopsie	6/8/2020	17/6/2026	In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.
CVE-2020-15570	Modificada	Media (5.5)	1.1%	—	Whoopsie Project Whoopsie	6/7/2020	17/6/2026	The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.
CVE-2020-12135	Modificada	Media (5.5)	1.2%	—	Whoopsie Project Whoopsie Mongodb C Driver	24/4/2020	17/6/2026	bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.
CVE-2019-11484	Modificada	Alta (7.8)	0.44%	—	Whoopsie Project Whoopsie Canonical Ubuntu Linux	8/2/2020	17/6/2026	Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
CVE-2012-0945	Modificada	Media (4.9)	0.71%	—	Whoopsie-daisy Project Whoopsie-daisy	15/1/2020	16/6/2026	whoopsie-daisy before 0.1.26: Root user can remove arbitrary files