Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed

Permalink CVE-2022-28653

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

updated 1 year, 2 months ago by @fricklerhandwerk Activity log

Created automatic suggestion 1 year, 2 months ago
@fricklerhandwerk dismissed 1 year, 2 months ago

Users can consume unlimited disk space in /var/crash

Users can consume unlimited disk space in /var/crash

References

https://www.cve.org/CVERecord?id=CVE-2022-28653 issue-tracking
https://www.cve.org/CVERecord?id=CVE-2022-28653 issue-tracking

Affected products

apport

<2.21.0

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Round a set of numbers while maintaining its sum

nixos-unstable 0.0.0.4
- nixpkgs-unstable 0.0.0.4
- nixos-unstable-small 0.0.0.4

Package maintainers

@thielema Henning Thielemann <nix@henning-thielemann.de>