Approved changes feed: RSS · Atom

cpe:2.3:a:canonical:apport:2.20.8-0ubuntu3:*:*:*:*:*:*:*

part: a version: 2.20.8-0ubuntu3 update: *

VendorCanonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88)
ProductApport (ca13502d-4e4d-5b64-b6ae-0356fae7fbc1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/apport purl2cpe 2026-06-01 10:12:43.457997
pkg:github/rickysarraf-notmine/apport purl2cpe 2026-06-01 10:12:43.457999

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-15702 vulnerable 2026-06-03 14:41:46.268292 TOCTOU in apport
HIGH (7)
TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.
Published: 2020-08-06T22:50:22.871Z
Updated: 2025-11-03T19:25:30.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15701 vulnerable 2026-06-03 14:41:46.230896 Unhandled exception in apport
MEDIUM (5.5)
An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.
Published: 2020-08-06T22:50:22.407Z
Updated: 2024-09-16T20:52:16.329Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.