Vulnerability-Lookup

FKIE_CVE-2020-15702

Vulnerability from fkie_nvd - Published: 2020-08-06 23:15 - Updated: 2026-06-17 02:57

Severity

7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.

References

URL	Tags
security@ubuntu.com	https://usn.ubuntu.com/4449-1	Vendor Advisory
security@ubuntu.com	https://usn.ubuntu.com/4449-1/	Vendor Advisory
security@ubuntu.com	https://usn.ubuntu.com/4449-2/	Vendor Advisory
security@ubuntu.com	https://www.zerodayinitiative.com/advisories/ZDI-20-979/	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/Jun/9
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/4449-1	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/4449-1/	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/4449-2/	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.zerodayinitiative.com/advisories/ZDI-20-979/	Third Party Advisory, VDB Entry

Impacted products

Vendor	Product	Version
canonical	apport	2.20.11-0ubuntu8
canonical	apport	2.20.11-0ubuntu9
canonical	apport	2.20.11-0ubuntu10
canonical	apport	2.20.11-0ubuntu11
canonical	apport	2.20.11-0ubuntu12
canonical	apport	2.20.11-0ubuntu13
canonical	apport	2.20.11-0ubuntu14
canonical	apport	2.20.11-0ubuntu15
canonical	apport	2.20.11-0ubuntu16
canonical	apport	2.20.11-0ubuntu17
canonical	apport	2.20.11-0ubuntu18
canonical	apport	2.20.11-0ubuntu19
canonical	apport	2.20.11-0ubuntu20
canonical	apport	2.20.11-0ubuntu21
canonical	apport	2.20.11-0ubuntu22
canonical	apport	2.20.11-0ubuntu23
canonical	apport	2.20.11-0ubuntu24
canonical	apport	2.20.11-0ubuntu25
canonical	apport	2.20.11-0ubuntu26
canonical	apport	2.20.11-0ubuntu27
canonical	apport	2.20.11-0ubuntu27.2
canonical	apport	2.20.11-0ubuntu27.3
canonical	apport	2.20.11-0ubuntu27.4
canonical	apport	2.20.11-0ubuntu27.5
canonical	ubuntu_linux	20.04
canonical	apport	2.20.7-0ubuntu3
canonical	apport	2.20.7-0ubuntu3.1
canonical	apport	2.20.7-0ubuntu4
canonical	apport	2.20.8-0ubuntu1
canonical	apport	2.20.8-0ubuntu2
canonical	apport	2.20.8-0ubuntu3
canonical	apport	2.20.8-0ubuntu4
canonical	apport	2.20.8-0ubuntu5
canonical	apport	2.20.8-0ubuntu6
canonical	apport	2.20.8-0ubuntu7
canonical	apport	2.20.8-0ubuntu8
canonical	apport	2.20.8-0ubuntu9
canonical	apport	2.20.8-0ubuntu10
canonical	apport	2.20.9-0ubuntu1
canonical	apport	2.20.9-0ubuntu2
canonical	apport	2.20.9-0ubuntu3
canonical	apport	2.20.9-0ubuntu4
canonical	apport	2.20.9-0ubuntu5
canonical	apport	2.20.9-0ubuntu6
canonical	apport	2.20.9-0ubuntu7
canonical	apport	2.20.9-0ubuntu7.1
canonical	apport	2.20.9-0ubuntu7.2
canonical	apport	2.20.9-0ubuntu7.3
canonical	apport	2.20.9-0ubuntu7.4
canonical	apport	2.20.9-0ubuntu7.5
canonical	apport	2.20.9-0ubuntu7.6
canonical	apport	2.20.9-0ubuntu7.7
canonical	apport	2.20.9-0ubuntu7.8
canonical	apport	2.20.9-0ubuntu7.9
canonical	apport	2.20.9-0ubuntu7.10
canonical	apport	2.20.9-0ubuntu7.11
canonical	apport	2.20.9-0ubuntu7.12
canonical	apport	2.20.9-0ubuntu7.13
canonical	apport	2.20.9-0ubuntu7.14
canonical	apport	2.20.9-0ubuntu7.15
canonical	ubuntu_linux	18.04
canonical	apport	2.19.1-0ubuntu3
canonical	apport	2.19.2-0ubuntu1
canonical	apport	2.19.2-0ubuntu2
canonical	apport	2.19.2-0ubuntu3
canonical	apport	2.19.2-0ubuntu4
canonical	apport	2.19.2-0ubuntu5
canonical	apport	2.19.2-0ubuntu6
canonical	apport	2.19.2-0ubuntu7
canonical	apport	2.19.2-0ubuntu8
canonical	apport	2.19.2-0ubuntu9
canonical	apport	2.19.3-0ubuntu1
canonical	apport	2.19.3-0ubuntu2
canonical	apport	2.19.3-0ubuntu3
canonical	apport	2.19.4-0ubuntu1
canonical	apport	2.19.4-0ubuntu2
canonical	apport	2.20-0ubuntu1
canonical	apport	2.20-0ubuntu2
canonical	apport	2.20-0ubuntu3
canonical	apport	2.20.1-0ubuntu1
canonical	apport	2.20.1-0ubuntu2
canonical	apport	2.20.1-0ubuntu2.1
canonical	apport	2.20.1-0ubuntu2.2
canonical	apport	2.20.1-0ubuntu2.4
canonical	apport	2.20.1-0ubuntu2.5
canonical	apport	2.20.1-0ubuntu2.6
canonical	apport	2.20.1-0ubuntu2.7
canonical	apport	2.20.1-0ubuntu2.8
canonical	apport	2.20.1-0ubuntu2.9
canonical	apport	2.20.1-0ubuntu2.10
canonical	apport	2.20.1-0ubuntu2.12
canonical	apport	2.20.1-0ubuntu2.13
canonical	apport	2.20.1-0ubuntu2.14
canonical	apport	2.20.1-0ubuntu2.15
canonical	apport	2.20.1-0ubuntu2.16
canonical	apport	2.20.1-0ubuntu2.17
canonical	apport	2.20.1-0ubuntu2.18
canonical	apport	2.20.1-0ubuntu2.19
canonical	apport	2.20.1-0ubuntu2.20
canonical	apport	2.20.1-0ubuntu2.21
canonical	apport	2.20.1-0ubuntu2.22
canonical	apport	2.20.1-0ubuntu2.23
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	14.04

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "apport",
          "vendor": "Canonical",
          "versions": [
            {
              "lessThan": "2.20.1-0ubuntu2.24",
              "status": "affected",
              "version": "2.20.1",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.9-0ubuntu7.16",
              "status": "affected",
              "version": "2.20.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.11-0ubuntu27.6",
              "status": "affected",
              "version": "2.20.11",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "security@ubuntu.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0580D85-61E7-446D-BB01-EFFD20A53FC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8DEF97E-C23C-431E-A017-29895305E666",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CF1FFD4-8088-4073-AF78-C2A177C0DFAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CC58CA6-54E2-4874-B327-838B19667FF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:*",
              "matchCriteriaId": "00060D2D-78C2-46CD-903D-48337C4A1173",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DD7604E-CEAC-4B54-A708-F98738381288",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BD91FE7-01B8-479F-8180-6E152F2996C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DCF9BD3-B46E-4D58-B53F-3DE081164FDB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F973F96-7AAD-44AB-90F0-D9F5DD7AFEE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E1A19B1-592C-48CF-B709-7CA573F40AF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:*",
              "matchCriteriaId": "287EA905-4DF5-4AF7-9C70-3A9CECA714C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:*",
              "matchCriteriaId": "479CEDFA-177B-413D-A9C1-2A16A9F9FB50",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:*",
              "matchCriteriaId": "7713D34D-046F-4627-80CA-B5CD63D41F38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:*",
              "matchCriteriaId": "A65605CF-2659-436E-9C96-E782F06992F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:*",
              "matchCriteriaId": "F27734BE-C46A-4815-A801-1FF5493B324B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EEAE19B-2138-4AA5-BB3B-3150DF0818DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D4BE412-F045-4754-9EF8-2F00E68542A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB26172A-D9F3-47A4-AA7D-7FD2E8499670",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:*",
              "matchCriteriaId": "388DDA89-BA36-45FE-864F-5810C3DF4093",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D17E8C3-56FE-4719-B214-BA369D5EB6D8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FE45751-8E63-428B-A04B-1E842FB5BEEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9381CFDA-0772-43D7-8F14-A6E0577F49EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEFB83E8-166C-4960-8AF1-DE210F4DE6DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F95414EB-487D-4E80-AE6C-CDBF0153807E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE3B37D5-6479-48A8-8E04-789778896053",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A4235DE-1EF0-490E-955E-BC61F0CB82EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu4:*:*:*:*:*:*:*",
              "matchCriteriaId": "34638795-2AE2-48BA-9800-2407E2617B43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu1:*:*:*:*:*:*:*",
              "matchCriteriaId": "88552AC8-4BD5-4652-BB36-BEF96EDE514F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F00DEC01-B39C-42DA-AC36-39A0A153CF44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu3:*:*:*:*:*:*:*",
              "matchCriteriaId": "82D8C1AF-6C55-4FA5-8937-6797E7E441C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E147A0DA-3A64-4DC0-BB7A-83432FDA5F1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD68C5DD-AF3B-42BC-AB18-E03E43A27076",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu6:*:*:*:*:*:*:*",
              "matchCriteriaId": "29EE4CB4-9CFE-4672-93F3-D135F98ADD56",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu7:*:*:*:*:*:*:*",
              "matchCriteriaId": "812471E0-35B8-454B-B9FB-539302606C80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu8:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF92AC2E-8043-4126-9CC9-1EC1EE77C68E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu9:*:*:*:*:*:*:*",
              "matchCriteriaId": "F07FD0B9-AFF4-47BB-B2C9-B819D8526D12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu10:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2A4392D-D859-4906-AFE2-EC56DCE8B85D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6890AEDE-8628-4467-BD78-9E28BD00CFD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3E475D2-7643-4F90-9A39-3C4C9C5882A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:*",
              "matchCriteriaId": "31C813DA-01A9-4963-992C-77F21B045C61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9432E171-BD9D-41E1-AAB3-2CA29FE2B07F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:*",
              "matchCriteriaId": "234375CE-6C99-4973-BAC5-950016C789A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1658CA25-4EB5-40D9-A1F3-78640EE58D07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF9A6112-6920-4006-A353-30D942301D63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "81F07BD0-2C19-4895-8B3C-F956ED7568BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "59420BB6-11ED-43BA-95FA-E843B9F0BFD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6C7998E-269B-40B1-9B73-99F22CB76A26",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "86CB2D37-78BD-486D-B27B-6E588563000D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B452791-E4F4-4165-B15B-205743EDE142",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "29CA8420-057C-4BF1-A5A5-E65C979F80D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FF71FAA-2457-4B6D-8265-5E9E40FB5B46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "A901840D-D35C-4DBB-B736-16066BA61016",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DC8A84E-204D-46FE-9455-E6EE28CBA02D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "B170FF62-8FE1-4E32-9CAB-6C2791842D4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3112FA6-E483-4A15-83A7-0DC086680D14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A7B0688-10F5-4FCC-B4C3-804BFC9F4572",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "9709BC6B-6432-47D3-AF3D-7D61230528E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEFA65E9-C2C5-4068-8B19-2087F54C75E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "62D8AD82-1A8F-450D-B3F5-05D86245A20F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.1-0ubuntu3:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CDAC7C9-022F-4900-BA2B-E226118390B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7AD2FFF-C115-4B55-8FBE-7C53CE7F3E78",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E439577C-3E3C-4233-9276-B26C242F2ABC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu3:*:*:*:*:*:*:*",
              "matchCriteriaId": "18D07534-D124-4A3F-BFC2-347E7D25B9C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4419CE5F-6093-49F1-B400-3CADB1EA8017",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4EFA888-6A84-48A7-A1F5-6EA1A602940E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu6:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B7DA437-17C5-4169-B296-CA924663B37F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu7:*:*:*:*:*:*:*",
              "matchCriteriaId": "39555DE8-5AE0-46DC-9DB5-56808D2D54A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu8:*:*:*:*:*:*:*",
              "matchCriteriaId": "5666D2A8-C212-4616-A62B-60C6FABB6679",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu9:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB25DCC8-6FC7-4138-90AC-FAFF65E6DA10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE54A967-E6CB-4975-93E2-B74D0F34816C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6381C1D-994D-49E9-886F-9AAAEC01F72C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7083F188-39C9-4A0F-B379-DBAA7C1F3E7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu1:*:*:*:*:*:*:*",
              "matchCriteriaId": "55710F53-487F-40CD-941C-BC2BA837C2D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu2:*:*:*:*:*:*:*",
              "matchCriteriaId": "754BC407-2C75-443F-A0A5-2081EED7628A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7E607C3-7E63-42A4-BE0E-3DFE3B9DD700",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC25ED5C-B1A4-4104-A0C9-633FB58F6596",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu3:*:*:*:*:*:*:*",
              "matchCriteriaId": "04C71AA4-574A-4C32-97C3-D7291EF18B2D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:*",
              "matchCriteriaId": "46F1A838-4379-4CC4-BEAD-EC9C793B4E56",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CA3903E-EA8B-4B78-B5CF-42C4AA6626C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFCDD843-C743-41E4-8743-62C6149B7BBC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "59FA4F13-3CF6-412B-846F-AE7D57B5FAEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BF1FE3C-DCF6-475F-BFFB-D445B960CA26",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2AEEADF-89B1-465A-ACCE-61B8F64BD8A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EBB7136-7802-4DB5-84AF-C75CBFFA5A3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "404DDAC7-952E-43FF-8EEB-FA1FC1A503A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "63388BC6-4EE0-41E3-BC4F-A43B0C56494E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D54FC7A-CD2A-4904-A059-48A8E94954A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "88F73732-BEA3-45D3-ABEE-51B45C1511E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "B53A64B3-7522-4B05-BA0C-BD0F429362B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF5AF908-B66A-48AD-912D-CBD02A1878A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF1672BA-3685-4B75-BB46-9BB181EC4959",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "58BB5513-D96B-4AE1-911F-40E561341859",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "542F64D1-EB92-41B3-A1E3-98061D1966B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "5EF284A8-86B0-47AB-B404-D4714D4E769A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "43355789-13F9-4D12-81DB-EFCEA9183F2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC67992A-E0CB-43A8-A749-D91BB460D279",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "12BB46F2-6B36-44A2-AE15-CDBC4AEBCD95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAD912C7-D5B2-4AB5-9C27-979E8DE805CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE7A141A-8588-4743-AB78-502A9724C474",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A282E85-A145-496B-A600-77012F24F82F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
              "matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de Condici\u00f3n de Carrera TOCTOU en apport permite a un atacante local escalar privilegios y ejecutar c\u00f3digo arbitrario. Un atacante puede salir del proceso bloqueado y explotar el reciclaje PID para generar un proceso root con el mismo PID que el proceso bloqueado, que luego puede ser usado para escalar privilegios. Corregido en versi\u00f3n 2.20.1-0ubuntu2.24, versiones 2.20.9 anteriores a 2.20.9-0ubuntu7.16 y versiones 2.20.11 anteriores a 2.20.11-0ubuntu27.6. Fue ZDI-CAN-11234"
    }
  ],
  "id": "CVE-2020-15702",
  "lastModified": "2026-06-17T02:57:04.867",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.4,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.0,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 5.9,
        "source": "security@ubuntu.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.0,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-08-06T23:15:11.750",
  "references": [
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://usn.ubuntu.com/4449-1"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://usn.ubuntu.com/4449-1/"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://usn.ubuntu.com/4449-2/"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2025/Jun/9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://usn.ubuntu.com/4449-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://usn.ubuntu.com/4449-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://usn.ubuntu.com/4449-2/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
    }
  ],
  "sourceIdentifier": "security@ubuntu.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        }
      ],
      "source": "security@ubuntu.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2020-15702 (GCVE-0-2020-15702)

Vulnerability from cvelistv5 – Published: 2020-08-06 22:50 – Updated: 2025-11-03 19:25

Title

TOCTOU in apport

Summary

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

canonical mitre root Scorecard

References

5 references

URL	Tags
https://usn.ubuntu.com/4449-1	x_refsource_CONFIRM
https://usn.ubuntu.com/4449-1/	vendor-advisoryx_refsource_UBUNTU
https://www.zerodayinitiative.com/advisories/ZDI-…	x_refsource_MISC
https://usn.ubuntu.com/4449-2/	vendor-advisoryx_refsource_UBUNTU
http://seclists.org/fulldisclosure/2025/Jun/9

Impacted products

1 product

Vendor	Product	Version
Canonical	apport	Affected: 2.20.1 , < 2.20.1-0ubuntu2.24 (custom) Affected: 2.20.9 , < 2.20.9-0ubuntu7.16 (custom) Affected: 2.20.11 , < 2.20.11-0ubuntu27.6 (custom)

Date Public

2020-08-04 00:00

Credits

Ryota Shiga

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:25:30.971Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4449-1"
          },
          {
            "name": "USN-4449-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4449-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
          },
          {
            "name": "USN-4449-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4449-2/"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jun/9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "apport",
          "vendor": "Canonical",
          "versions": [
            {
              "lessThan": "2.20.1-0ubuntu2.24",
              "status": "affected",
              "version": "2.20.1",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.9-0ubuntu7.16",
              "status": "affected",
              "version": "2.20.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.20.11-0ubuntu27.6",
              "status": "affected",
              "version": "2.20.11",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ryota Shiga"
        }
      ],
      "datePublic": "2020-08-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-14T15:06:09.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://usn.ubuntu.com/4449-1"
        },
        {
          "name": "USN-4449-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4449-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
        },
        {
          "name": "USN-4449-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4449-2/"
        }
      ],
      "source": {
        "advisory": "https://usn.ubuntu.com/4449-1",
        "discovery": "EXTERNAL"
      },
      "title": "TOCTOU in apport",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "",
          "ASSIGNER": "security@ubuntu.com",
          "DATE_PUBLIC": "2020-08-04T21:00:00.000Z",
          "ID": "CVE-2020-15702",
          "STATE": "PUBLIC",
          "TITLE": "TOCTOU in apport"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "apport",
                      "version": {
                        "version_data": [
                          {
                            "platform": "",
                            "version_affected": "\u003c",
                            "version_name": "2.20.1",
                            "version_value": "2.20.1-0ubuntu2.24"
                          },
                          {
                            "platform": "",
                            "version_affected": "\u003c",
                            "version_name": "2.20.9",
                            "version_value": "2.20.9-0ubuntu7.16"
                          },
                          {
                            "platform": "",
                            "version_affected": "\u003c",
                            "version_name": "2.20.11",
                            "version_value": "2.20.11-0ubuntu27.6"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Canonical"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [
          {
            "lang": "eng",
            "value": "Ryota Shiga"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."
            }
          ]
        },
        "exploit": [],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://usn.ubuntu.com/4449-1",
              "refsource": "CONFIRM",
              "url": "https://usn.ubuntu.com/4449-1"
            },
            {
              "name": "USN-4449-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4449-1/"
            },
            {
              "name": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/",
              "refsource": "MISC",
              "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
            },
            {
              "name": "USN-4449-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4449-2/"
            }
          ]
        },
        "solution": [],
        "source": {
          "advisory": "https://usn.ubuntu.com/4449-1",
          "defect": [],
          "discovery": "EXTERNAL"
        },
        "work_around": []
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2020-15702",
    "datePublished": "2020-08-06T22:50:22.871Z",
    "dateReserved": "2020-07-14T00:00:00.000Z",
    "dateUpdated": "2025-11-03T19:25:30.971Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

FKIE_CVE-2020-15702

CVE-2020-15702 (GCVE-0-2020-15702)

Tags

Sightings

Nomenclature

Related by attack behaviour