Log Overflow Vulnerability in Ubuntu's Apport Logging System

CVE-2022-28654

Summary

The vulnerability in Ubuntu's Apport logging system arises from the function is_closing_session(), which permits users to manipulate and fill up the apport.log file. Excessive logging can potentially lead to system performance degradation or outright denial of service. Users are advised to monitor and manage their logging configurations to mitigate the impacts of this issue. For more information, refer to the vendor's advisory.

References