CVE-2022-28658 Command injection in Apport

What is CVE-2022-28658?

CVE-2022-28658 is a medium-severity command injection vulnerability in Canonical Ubuntu Linux, published on 4 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

Which versions are affected by CVE-2022-28658?

It affects 2 products.

Products include Apport Project Apport, Canonical Ubuntu Linux.

How do I fix CVE-2022-28658?

Apply the vendor's patch.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2022-28658 being exploited?

There is no known exploitation of CVE-2022-28658 in the wild and no public exploit code.

Other vulnerabilities in Canonical Ubuntu Linux

• CVE-2022-28657 Denial of service in Apport High 7.8
• CVE-2018-6552 Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing High 7.8
• CVE-2017-14177 Privilege escalation in Apport High 7.8
• CVE-2017-14179 Privilege escalation in Apport High 7.8
• CVE-2017-14180 Privilege escalation in Apport High 7.8

All Canonical Ubuntu Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4pgv-p58j-ghpx, UBUNTU-CVE-2022-28658.