Makes you wonder what the critical level is for

Remote RCE/data theft basically, as opposed to the local of High: https://ubuntu.com/security/cves/about#priority

Ah, I misread the first comment and thought it said remote execution, not remote denial