Read the docs
TI-2020-09600 Aliases CVE-2020-11936GHSA-rfvc-9gpm-pcp3

gdbus setgid privilege escalation

Priority MEDIUM 50Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

gdbus setgid privilege escalation

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00352 29th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Apport (Canonical Ltd.): 2.20.11-0ubuntu27.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CanonicalApportbefore 2.20.11-0ubuntu27.62.20.11-0ubuntu27.6Patch availableCNA
  • Apport VendorCanonical Affected before 2.20.11-0ubuntu27.6 Fixed in 2.20.11-0ubuntu27.6 Patch available CNA

CPE configurations NVD · 98

CPEVersionsRoleVendor
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:*2.20.1-0ubuntu1VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:*2.20.1-0ubuntu2VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:*2.20.1-0ubuntu2.1VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:*2.20.1-0ubuntu2.2VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:*2.20.1-0ubuntu2.4VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:*2.20.1-0ubuntu2.5VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:*2.20.1-0ubuntu2.6VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:*2.20.1-0ubuntu2.7VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:*2.20.1-0ubuntu2.8VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:*2.20.1-0ubuntu2.9VulnerableCanonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu1 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.1 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.2 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.4 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.5 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.6 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.7 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.8 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.9 Vulnerable ·Canonical
Show 88 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:*2.20.1-0ubuntu2.10VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:*2.20.1-0ubuntu2.12VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:*2.20.1-0ubuntu2.13VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:*2.20.1-0ubuntu2.14VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:*2.20.1-0ubuntu2.15VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:*2.20.1-0ubuntu2.16VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:*2.20.1-0ubuntu2.17VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:*2.20.1-0ubuntu2.18VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:*2.20.1-0ubuntu2.19VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:*2.20.1-0ubuntu2.20VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:*2.20.1-0ubuntu2.21VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:*2.20.1-0ubuntu2.22VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:*2.20.1-0ubuntu2.23VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:*2.20.9-0ubuntu1VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:*2.20.9-0ubuntu2VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:*2.20.9-0ubuntu3VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:*2.20.9-0ubuntu4VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:*2.20.9-0ubuntu5VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:*2.20.9-0ubuntu6VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:*2.20.9-0ubuntu7VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:*2.20.9-0ubuntu7.1VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:*2.20.9-0ubuntu7.2VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:*2.20.9-0ubuntu7.3VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:*2.20.9-0ubuntu7.4VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:*2.20.9-0ubuntu7.5VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:*2.20.9-0ubuntu7.6VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:*2.20.9-0ubuntu7.7VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:*2.20.9-0ubuntu7.8VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:*2.20.9-0ubuntu7.9VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:*2.20.9-0ubuntu7.10VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:*2.20.9-0ubuntu7.11VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:*2.20.9-0ubuntu7.12VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:*2.20.9-0ubuntu7.13VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:*2.20.9-0ubuntu7.14VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:*2.20.9-0ubuntu7.15VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:*2.20.11-0ubuntu8VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:*2.20.11-0ubuntu9VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:*2.20.11-0ubuntu10VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:*2.20.11-0ubuntu11VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:*2.20.11-0ubuntu12VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:*2.20.11-0ubuntu13VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:*2.20.11-0ubuntu14VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:*2.20.11-0ubuntu15VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:*2.20.11-0ubuntu16VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:*2.20.11-0ubuntu17VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:*2.20.11-0ubuntu18VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:*2.20.11-0ubuntu19VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:*2.20.11-0ubuntu20VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:*2.20.11-0ubuntu21VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:*2.20.11-0ubuntu22VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:*2.20.11-0ubuntu23VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:*2.20.11-0ubuntu24VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:*2.20.11-0ubuntu25VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:*2.20.11-0ubuntu26VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:*2.20.11-0ubuntu27VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:*2.20.11-0ubuntu27.2VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:*2.20.11-0ubuntu27.3VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:*2.20.11-0ubuntu27.4VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:*2.20.11-0ubuntu27.5VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.7:*:*:*:*:*:*:*2.20.11-0ubuntu27.7VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.8:*:*:*:*:*:*:*2.20.11-0ubuntu27.8VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.9:*:*:*:*:*:*:*2.20.11-0ubuntu27.9VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.10:*:*:*:*:*:*:*2.20.11-0ubuntu27.10VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.11:*:*:*:*:*:*:*2.20.11-0ubuntu27.11VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.12:*:*:*:*:*:*:*2.20.11-0ubuntu27.12VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.13:*:*:*:*:*:*:*2.20.11-0ubuntu27.13VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.14:*:*:*:*:*:*:*2.20.11-0ubuntu27.14VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.16:*:*:*:*:*:*:*2.20.11-0ubuntu27.16VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.17:*:*:*:*:*:*:*2.20.11-0ubuntu27.17VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.18:*:*:*:*:*:*:*2.20.11-0ubuntu27.18VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.19:*:*:*:*:*:*:*2.20.11-0ubuntu27.19VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.20:*:*:*:*:*:*:*2.20.11-0ubuntu27.20VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu28:*:*:*:*:*:*:*2.20.11-0ubuntu28VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu29:*:*:*:*:*:*:*2.20.11-0ubuntu29VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu30:*:*:*:*:*:*:*2.20.11-0ubuntu30VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu31:*:*:*:*:*:*:*2.20.11-0ubuntu31VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu32:*:*:*:*:*:*:*2.20.11-0ubuntu32VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu33:*:*:*:*:*:*:*2.20.11-0ubuntu33VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu34:*:*:*:*:*:*:*2.20.11-0ubuntu34VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu35:*:*:*:*:*:*:*2.20.11-0ubuntu35VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu36:*:*:*:*:*:*:*2.20.11-0ubuntu36VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu37:*:*:*:*:*:*:*2.20.11-0ubuntu37VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu38:*:*:*:*:*:*:*2.20.11-0ubuntu38VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu39:*:*:*:*:*:*:*2.20.11-0ubuntu39VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu40:*:*:*:*:*:*:*2.20.11-0ubuntu40VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu41:*:*:*:*:*:*:*2.20.11-0ubuntu41VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu42:*:*:*:*:*:*:*2.20.11-0ubuntu42VulnerableCanonical
cpe:2.3:a:canonical:apport:2.20.11-0ubuntu43:*:*:*:*:*:*:*2.20.11-0ubuntu43VulnerableCanonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.10 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.12 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.13 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.14 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.15 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.16 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.17 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.18 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.19 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.20 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.21 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.22 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.23 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu1 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu2 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu3 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu4 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu5 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu6 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.1 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.2 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.3 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.4 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.5 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.6 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.7 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.8 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.9 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.10 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.11 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.12 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.13 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.14 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.15 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu8 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu9 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu10 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu11 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu12 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu13 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu14 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu15 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu16 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu17 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu18 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu19 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu20 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu21 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu22 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu23 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu24 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu25 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu26 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.2 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.3 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.4 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.5 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.7:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.7 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.8:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.8 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.9:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.9 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.10:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.10 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.11:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.11 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.12:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.12 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.13:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.13 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.14:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.14 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.16:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.16 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.17:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.17 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.18:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.18 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.19:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.19 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.20:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.20 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu28:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu28 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu29:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu29 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu30:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu30 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu31:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu31 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu32:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu32 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu33:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu33 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu34:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu34 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu35:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu35 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu36:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu36 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu37:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu37 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu38:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu38 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu39:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu39 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu40:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu40 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu41:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu41 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu42:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu42 Vulnerable ·Canonical
  • cpe:2.3:a:canonical:apport:2.20.11-0ubuntu43:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu43 Vulnerable ·Canonical

Remediation

  • Fix · CNA Apport (Canonical Ltd.) Fixed in 2.20.11-0ubuntu27.6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-11936
  2. 2026-10-03 Alias added: GHSA-rfvc-9gpm-pcp3

References

Exploit 1

Advisory 1

  • TI-2025-04530 Race Condition in Canonical Apport CVSS 3.1MEDIUM 4.7
  • TI-2025-04908 Ubuntu Apport Insecure File Permissions Vulnerability CVSS 4.0LOW 1.9
  • TI-2022-11298 Users can consume unlimited disk space in /var/crash CVSS 3.1HIGH 7.5
  • TI-2021-07816 apport can be stalled by reading a FIFO CVSS 3.1HIGH 8.8
  • TI-2023-01253 local privilege escalation in apport-cli CVSS 3.1HIGH 7.8
  • TI-2021-07815 apport improperly parses /proc/pid/stat CVSS 3.1HIGH 8.8
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences