CVE-2022-28653

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Users can consume unlimited disk space in /var/crash

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jan 31, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-286545.5is_closing_session() allows users to fill up apport.logCVE-2022-286557.1is_closing_session() allows users to create arbitrary tcp dbus connectionsCVE-2022-286565.5is_closing_session() allows users to consume RAM in the Apport processCVE-2022-286577.8Apport does not disable python crash handler before entering chrootCVE-2022-286585.5Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofingCVE-2022-28667.8FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is trickeCVE-2022-286609.8The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is usedCVE-2022-286618.8A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds read pCVE-2022-286626.5A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write CVE-2022-286637.8A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write CVE-2022-286649.8A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can leaCVE-2022-286659.8A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lea
CVE-2022-28653: High severity, CVSS 7.5 | Vulnix