CVE-2022-28652: Apport Project Apport

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

Affected products

• Apport Project Apport: before 2.21.0 (fixed in 2.21.0)
• Canonical Ubuntu Linux: version 18.04 only; version 20.04 only; version 21.10 only; version 22.04 only

Published 2024-06-04. Last modified 2026-06-17.