CVE catalog

CVE-2019-11484

whoopsie vulnerability

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.44% · Oct 27, 2026

Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute code as the whoopsie user.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuwhoopsie16.040.2.49vulnerable
Ubuntuwhoopsie16.040.2.50vulnerable
Ubuntuwhoopsie16.040.2.51vulnerable
Ubuntuwhoopsie16.040.2.52vulnerable
Ubuntuwhoopsie16.040.2.52.1vulnerable
Ubuntuwhoopsie16.040.2.52.2vulnerable
Ubuntuwhoopsie16.040.2.52.3vulnerable
Ubuntuwhoopsie16.040.2.52.4vulnerable
Ubuntuwhoopsie16.040.2.52.5vulnerable
Ubuntuwhoopsie16.040.2.52.5ubuntu0.1vulnerable
Ubuntuwhoopsie16.040.2.52.5ubuntu0.2fixed
Ubuntuwhoopsie18.040.2.58vulnerable
Ubuntuwhoopsie18.040.2.59vulnerable
Ubuntuwhoopsie18.040.2.59build1vulnerable
Ubuntuwhoopsie18.040.2.60vulnerable
Ubuntuwhoopsie18.040.2.62vulnerable
Ubuntuwhoopsie18.040.2.62ubuntu0.1vulnerable
Ubuntuwhoopsie18.040.2.62ubuntu0.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuwhoopsiedeb16.040.2.52.5ubuntu0.2Not reportedUSN-4170-1Not reported
Ubuntuwhoopsiedeb18.040.2.62ubuntu0.2Not reportedUSN-4170-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References