TOCTOU in apport
Priority LOW 31CWE-367Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.
Why it matters now
EPSS 0.00498 42nd percentileScored 2026-11-07
Fix Fixed apport (Canonical): 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Canonical | apport | 2.20.1 to before 2.20.1-0ubuntu2.24; 2.20.9 to before 2.20.9-0ubuntu7.16; 2.20.11 to before 2.20.11-0ubuntu27.6 | 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6 | Patch available | CNA |
- apport VendorCanonical Affected 2.20.1 to before 2.20.1-0ubuntu2.24; 2.20.9 to before 2.20.9-0ubuntu7.16; 2.20.11 to before 2.20.11-0ubuntu27.6 Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6 Patch available CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:* | 2.20.11-0ubuntu8 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:* | 2.20.11-0ubuntu9 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:* | 2.20.11-0ubuntu10 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:* | 2.20.11-0ubuntu11 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:* | 2.20.11-0ubuntu12 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:* | 2.20.11-0ubuntu13 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:* | 2.20.11-0ubuntu14 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:* | 2.20.11-0ubuntu15 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:* | 2.20.11-0ubuntu16 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:* | 2.20.11-0ubuntu17 | Vulnerable | Canonical |
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu8 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu9 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu10 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu11 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu12 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu13 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu14 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu15 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu16 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu17 Vulnerable ·Canonical
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:* | 2.20.11-0ubuntu18 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:* | 2.20.11-0ubuntu19 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:* | 2.20.11-0ubuntu20 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:* | 2.20.11-0ubuntu21 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:* | 2.20.11-0ubuntu22 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:* | 2.20.11-0ubuntu23 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:* | 2.20.11-0ubuntu24 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:* | 2.20.11-0ubuntu25 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:* | 2.20.11-0ubuntu26 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:* | 2.20.11-0ubuntu27 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:* | 2.20.11-0ubuntu27.2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:* | 2.20.11-0ubuntu27.3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:* | 2.20.11-0ubuntu27.4 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:* | 2.20.11-0ubuntu27.5 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* | 20.04 | Running on | Canonical |
| cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3:*:*:*:*:*:*:* | 2.20.7-0ubuntu3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3.1:*:*:*:*:*:*:* | 2.20.7-0ubuntu3.1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.7-0ubuntu4:*:*:*:*:*:*:* | 2.20.7-0ubuntu4 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu1:*:*:*:*:*:*:* | 2.20.8-0ubuntu1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu2:*:*:*:*:*:*:* | 2.20.8-0ubuntu2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu3:*:*:*:*:*:*:* | 2.20.8-0ubuntu3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu4:*:*:*:*:*:*:* | 2.20.8-0ubuntu4 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu5:*:*:*:*:*:*:* | 2.20.8-0ubuntu5 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu6:*:*:*:*:*:*:* | 2.20.8-0ubuntu6 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu7:*:*:*:*:*:*:* | 2.20.8-0ubuntu7 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu8:*:*:*:*:*:*:* | 2.20.8-0ubuntu8 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu9:*:*:*:*:*:*:* | 2.20.8-0ubuntu9 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.8-0ubuntu10:*:*:*:*:*:*:* | 2.20.8-0ubuntu10 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:* | 2.20.9-0ubuntu1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:* | 2.20.9-0ubuntu2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:* | 2.20.9-0ubuntu3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:* | 2.20.9-0ubuntu4 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:* | 2.20.9-0ubuntu5 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:* | 2.20.9-0ubuntu6 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:* | 2.20.9-0ubuntu7 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.4 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.5 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.6 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.7 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.8 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.9 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.10 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.11 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.12 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.13 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.14 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:* | 2.20.9-0ubuntu7.15 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* | 18.04 | Running on | Canonical |
| cpe:2.3:a:canonical:apport:2.19.1-0ubuntu3:*:*:*:*:*:*:* | 2.19.1-0ubuntu3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu1:*:*:*:*:*:*:* | 2.19.2-0ubuntu1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu2:*:*:*:*:*:*:* | 2.19.2-0ubuntu2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu3:*:*:*:*:*:*:* | 2.19.2-0ubuntu3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu4:*:*:*:*:*:*:* | 2.19.2-0ubuntu4 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu5:*:*:*:*:*:*:* | 2.19.2-0ubuntu5 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu6:*:*:*:*:*:*:* | 2.19.2-0ubuntu6 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu7:*:*:*:*:*:*:* | 2.19.2-0ubuntu7 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu8:*:*:*:*:*:*:* | 2.19.2-0ubuntu8 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.2-0ubuntu9:*:*:*:*:*:*:* | 2.19.2-0ubuntu9 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.3-0ubuntu1:*:*:*:*:*:*:* | 2.19.3-0ubuntu1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.3-0ubuntu2:*:*:*:*:*:*:* | 2.19.3-0ubuntu2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.3-0ubuntu3:*:*:*:*:*:*:* | 2.19.3-0ubuntu3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.4-0ubuntu1:*:*:*:*:*:*:* | 2.19.4-0ubuntu1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.19.4-0ubuntu2:*:*:*:*:*:*:* | 2.19.4-0ubuntu2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20-0ubuntu1:*:*:*:*:*:*:* | 2.20-0ubuntu1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20-0ubuntu2:*:*:*:*:*:*:* | 2.20-0ubuntu2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20-0ubuntu3:*:*:*:*:*:*:* | 2.20-0ubuntu3 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:* | 2.20.1-0ubuntu1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:* | 2.20.1-0ubuntu2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.1 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.2 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.4 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.5 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.6 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.7 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.8 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.9 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.10 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.12 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.13 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.14 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.15 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.16 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.17 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.18 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.19 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.20 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.21 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.22 | Vulnerable | Canonical |
| cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:* | 2.20.1-0ubuntu2.23 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Running on | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* | 14.04 | Vulnerable | Canonical |
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu18 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu19 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu20 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu21 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu22 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu23 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu24 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu25 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu26 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.4 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:* Versions 2.20.11-0ubuntu27.5 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Running on ·Canonical
- cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3:*:*:*:*:*:*:* Versions 2.20.7-0ubuntu3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3.1:*:*:*:*:*:*:* Versions 2.20.7-0ubuntu3.1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.7-0ubuntu4:*:*:*:*:*:*:* Versions 2.20.7-0ubuntu4 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu1:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu2:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu3:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu4:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu4 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu5:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu5 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu6:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu6 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu7:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu7 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu8:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu8 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu9:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu9 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.8-0ubuntu10:*:*:*:*:*:*:* Versions 2.20.8-0ubuntu10 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu4 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu5 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu6 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.4 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.5 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.6 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.7 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.8 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.9 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.10 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.11 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.12 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.13 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.14 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:* Versions 2.20.9-0ubuntu7.15 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Running on ·Canonical
- cpe:2.3:a:canonical:apport:2.19.1-0ubuntu3:*:*:*:*:*:*:* Versions 2.19.1-0ubuntu3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu1:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu2:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu3:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu4:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu4 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu5:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu5 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu6:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu6 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu7:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu7 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu8:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu8 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.2-0ubuntu9:*:*:*:*:*:*:* Versions 2.19.2-0ubuntu9 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.3-0ubuntu1:*:*:*:*:*:*:* Versions 2.19.3-0ubuntu1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.3-0ubuntu2:*:*:*:*:*:*:* Versions 2.19.3-0ubuntu2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.3-0ubuntu3:*:*:*:*:*:*:* Versions 2.19.3-0ubuntu3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.4-0ubuntu1:*:*:*:*:*:*:* Versions 2.19.4-0ubuntu1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.19.4-0ubuntu2:*:*:*:*:*:*:* Versions 2.19.4-0ubuntu2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20-0ubuntu1:*:*:*:*:*:*:* Versions 2.20-0ubuntu1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20-0ubuntu2:*:*:*:*:*:*:* Versions 2.20-0ubuntu2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20-0ubuntu3:*:*:*:*:*:*:* Versions 2.20-0ubuntu3 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.1 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.2 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.4 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.5 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.6 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.7 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.8 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.9 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.10 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.12 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.13 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.14 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.15 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.16 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.17 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.18 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.19 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.20 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.21 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.22 Vulnerable ·Canonical
- cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:* Versions 2.20.1-0ubuntu2.23 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Running on ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
Remediation
- Fix · CNA apport (Canonical) Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Canonical apport — USN-4449-1
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2020-12373 Unhandled exception in apportPriority LOW 25
- Advisory ·
Canonical apport — USN-4449-2
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2020-12373 Unhandled exception in apportPriority LOW 25
Timeline
- 2026-10-02 Threatist record created from CVE-2020-15702
- 2026-10-03 Alias added: GHSA-r8j7-rc3f-2wqq
References
More Canonical Apport vulnerabilities
- TI-2025-04530 Race Condition in Canonical Apport CVSS 3.1MEDIUM 4.7
- TI-2020-09600 gdbus setgid privilege escalation CVSS 3.1LOW 3.1
- TI-2025-04908 Ubuntu Apport Insecure File Permissions Vulnerability CVSS 4.0LOW 1.9
- TI-2022-11298 Users can consume unlimited disk space in /var/crash CVSS 3.1HIGH 7.5
- TI-2021-07816 apport can be stalled by reading a FIFO CVSS 3.1HIGH 8.8
- TI-2023-01253 local privilege escalation in apport-cli CVSS 3.1HIGH 7.8
Sources
- CVE-2020-15702 · CVE Program
- CVE-2020-15702 · NVD
- FIRST EPSS
- GHSA-r8j7-rc3f-2wqq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences