CVE-2022-28657: 
Linux Ubuntu vulnerability analysis and mitigation

Apport, a crash reporting system, contains a vulnerability (CVE-2022-28657) where it fails to disable the Python crash handler before entering chroot. This vulnerability was discovered by Gerrit Venema and affects multiple versions of Ubuntu Linux systems. The issue was initially reported in May 2022 and has been assigned a CVSS v3.1 base score of 7.8 (High) (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability requires local access, low attack complexity, and low privileges to exploit. No user interaction is needed, and the scope is unchanged. The impact affects confidentiality, integrity, and availability, all rated as high (NVD).

A local attacker could potentially exploit this vulnerability to execute arbitrary code due to the Python crash handler not being disabled before chrooting into a container (Ubuntu Security).

The vulnerability requires local access with low attack complexity and low privileges to exploit. No user interaction is required for exploitation (NVD).

The vulnerability has been fixed in multiple Ubuntu versions. Updates are available for Ubuntu 22.04 LTS (2.20.11-0ubuntu82.1), Ubuntu 21.10 (2.20.11-0ubuntu71.2), Ubuntu 20.04 LTS (2.20.11-0ubuntu27.24), and Ubuntu 18.04 LTS (2.20.9-0ubuntu7.28). Users are advised to update their systems to the latest package versions (Ubuntu Security).