CVE-2020-15702 (GCVE-0-2020-15702)
Vulnerability from cvelistv5 – Published: 2020-08-06 22:50 – Updated: 2025-11-03 19:25
VLAI
EPSS
VEX
Title
TOCTOU in apport
Summary
TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.
Severity
CWE
- CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://usn.ubuntu.com/4449-1 | x_refsource_CONFIRM |
| https://usn.ubuntu.com/4449-1/ | vendor-advisoryx_refsource_UBUNTU |
| https://www.zerodayinitiative.com/advisories/ZDI-… | x_refsource_MISC |
| https://usn.ubuntu.com/4449-2/ | vendor-advisoryx_refsource_UBUNTU |
| http://seclists.org/fulldisclosure/2025/Jun/9 |
Impacted products
Date Public
2020-08-04 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-03T19:25:30.971Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4449-1"
},
{
"name": "USN-4449-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4449-1/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
},
{
"name": "USN-4449-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4449-2/"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jun/9"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "apport",
"vendor": "Canonical",
"versions": [
{
"lessThan": "2.20.1-0ubuntu2.24",
"status": "affected",
"version": "2.20.1",
"versionType": "custom"
},
{
"lessThan": "2.20.9-0ubuntu7.16",
"status": "affected",
"version": "2.20.9",
"versionType": "custom"
},
{
"lessThan": "2.20.11-0ubuntu27.6",
"status": "affected",
"version": "2.20.11",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Ryota Shiga"
}
],
"datePublic": "2020-08-04T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-367",
"description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-09-14T15:06:09.000Z",
"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"shortName": "canonical"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://usn.ubuntu.com/4449-1"
},
{
"name": "USN-4449-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4449-1/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
},
{
"name": "USN-4449-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4449-2/"
}
],
"source": {
"advisory": "https://usn.ubuntu.com/4449-1",
"discovery": "EXTERNAL"
},
"title": "TOCTOU in apport",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "",
"ASSIGNER": "security@ubuntu.com",
"DATE_PUBLIC": "2020-08-04T21:00:00.000Z",
"ID": "CVE-2020-15702",
"STATE": "PUBLIC",
"TITLE": "TOCTOU in apport"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "apport",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "2.20.1",
"version_value": "2.20.1-0ubuntu2.24"
},
{
"platform": "",
"version_affected": "\u003c",
"version_name": "2.20.9",
"version_value": "2.20.9-0ubuntu7.16"
},
{
"platform": "",
"version_affected": "\u003c",
"version_name": "2.20.11",
"version_value": "2.20.11-0ubuntu27.6"
}
]
}
}
]
},
"vendor_name": "Canonical"
}
]
}
},
"configuration": [],
"credit": [
{
"lang": "eng",
"value": "Ryota Shiga"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."
}
]
},
"exploit": [],
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://usn.ubuntu.com/4449-1",
"refsource": "CONFIRM",
"url": "https://usn.ubuntu.com/4449-1"
},
{
"name": "USN-4449-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4449-1/"
},
{
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/",
"refsource": "MISC",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
},
{
"name": "USN-4449-2",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4449-2/"
}
]
},
"solution": [],
"source": {
"advisory": "https://usn.ubuntu.com/4449-1",
"defect": [],
"discovery": "EXTERNAL"
},
"work_around": []
}
}
},
"cveMetadata": {
"assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"assignerShortName": "canonical",
"cveId": "CVE-2020-15702",
"datePublished": "2020-08-06T22:50:22.871Z",
"dateReserved": "2020-07-14T00:00:00.000Z",
"dateUpdated": "2025-11-03T19:25:30.971Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-15702",
"date": "2026-09-19",
"epss": "0.00498",
"percentile": "0.41714"
},
"fkie_nvd": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:*",
"matchCriteriaId": "F0580D85-61E7-446D-BB01-EFFD20A53FC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:*",
"matchCriteriaId": "D8DEF97E-C23C-431E-A017-29895305E666",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:*",
"matchCriteriaId": "5CF1FFD4-8088-4073-AF78-C2A177C0DFAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:*",
"matchCriteriaId": "0CC58CA6-54E2-4874-B327-838B19667FF1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:*",
"matchCriteriaId": "00060D2D-78C2-46CD-903D-48337C4A1173",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:*",
"matchCriteriaId": "7DD7604E-CEAC-4B54-A708-F98738381288",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:*",
"matchCriteriaId": "6BD91FE7-01B8-479F-8180-6E152F2996C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:*",
"matchCriteriaId": "3DCF9BD3-B46E-4D58-B53F-3DE081164FDB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:*",
"matchCriteriaId": "7F973F96-7AAD-44AB-90F0-D9F5DD7AFEE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:*",
"matchCriteriaId": "5E1A19B1-592C-48CF-B709-7CA573F40AF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:*",
"matchCriteriaId": "287EA905-4DF5-4AF7-9C70-3A9CECA714C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:*",
"matchCriteriaId": "479CEDFA-177B-413D-A9C1-2A16A9F9FB50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:*",
"matchCriteriaId": "7713D34D-046F-4627-80CA-B5CD63D41F38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:*",
"matchCriteriaId": "A65605CF-2659-436E-9C96-E782F06992F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:*",
"matchCriteriaId": "F27734BE-C46A-4815-A801-1FF5493B324B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:*",
"matchCriteriaId": "8EEAE19B-2138-4AA5-BB3B-3150DF0818DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:*",
"matchCriteriaId": "0D4BE412-F045-4754-9EF8-2F00E68542A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:*",
"matchCriteriaId": "FB26172A-D9F3-47A4-AA7D-7FD2E8499670",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:*",
"matchCriteriaId": "388DDA89-BA36-45FE-864F-5810C3DF4093",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:*",
"matchCriteriaId": "3D17E8C3-56FE-4719-B214-BA369D5EB6D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4FE45751-8E63-428B-A04B-1E842FB5BEEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9381CFDA-0772-43D7-8F14-A6E0577F49EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:*",
"matchCriteriaId": "DEFB83E8-166C-4960-8AF1-DE210F4DE6DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F95414EB-487D-4E80-AE6C-CDBF0153807E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "AE3B37D5-6479-48A8-8E04-789778896053",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7A4235DE-1EF0-490E-955E-BC61F0CB82EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "34638795-2AE2-48BA-9800-2407E2617B43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "88552AC8-4BD5-4652-BB36-BEF96EDE514F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "F00DEC01-B39C-42DA-AC36-39A0A153CF44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "82D8C1AF-6C55-4FA5-8937-6797E7E441C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "E147A0DA-3A64-4DC0-BB7A-83432FDA5F1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu5:*:*:*:*:*:*:*",
"matchCriteriaId": "FD68C5DD-AF3B-42BC-AB18-E03E43A27076",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu6:*:*:*:*:*:*:*",
"matchCriteriaId": "29EE4CB4-9CFE-4672-93F3-D135F98ADD56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu7:*:*:*:*:*:*:*",
"matchCriteriaId": "812471E0-35B8-454B-B9FB-539302606C80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu8:*:*:*:*:*:*:*",
"matchCriteriaId": "EF92AC2E-8043-4126-9CC9-1EC1EE77C68E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu9:*:*:*:*:*:*:*",
"matchCriteriaId": "F07FD0B9-AFF4-47BB-B2C9-B819D8526D12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu10:*:*:*:*:*:*:*",
"matchCriteriaId": "A2A4392D-D859-4906-AFE2-EC56DCE8B85D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "6890AEDE-8628-4467-BD78-9E28BD00CFD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "A3E475D2-7643-4F90-9A39-3C4C9C5882A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "31C813DA-01A9-4963-992C-77F21B045C61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "9432E171-BD9D-41E1-AAB3-2CA29FE2B07F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:*",
"matchCriteriaId": "234375CE-6C99-4973-BAC5-950016C789A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:*",
"matchCriteriaId": "1658CA25-4EB5-40D9-A1F3-78640EE58D07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:*",
"matchCriteriaId": "DF9A6112-6920-4006-A353-30D942301D63",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "81F07BD0-2C19-4895-8B3C-F956ED7568BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "59420BB6-11ED-43BA-95FA-E843B9F0BFD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D6C7998E-269B-40B1-9B73-99F22CB76A26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "86CB2D37-78BD-486D-B27B-6E588563000D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0B452791-E4F4-4165-B15B-205743EDE142",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "29CA8420-057C-4BF1-A5A5-E65C979F80D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "6FF71FAA-2457-4B6D-8265-5E9E40FB5B46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:*",
"matchCriteriaId": "A901840D-D35C-4DBB-B736-16066BA61016",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:*",
"matchCriteriaId": "8DC8A84E-204D-46FE-9455-E6EE28CBA02D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "B170FF62-8FE1-4E32-9CAB-6C2791842D4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:*",
"matchCriteriaId": "C3112FA6-E483-4A15-83A7-0DC086680D14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:*",
"matchCriteriaId": "1A7B0688-10F5-4FCC-B4C3-804BFC9F4572",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:*",
"matchCriteriaId": "9709BC6B-6432-47D3-AF3D-7D61230528E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:*",
"matchCriteriaId": "DEFA65E9-C2C5-4068-8B19-2087F54C75E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:*",
"matchCriteriaId": "62D8AD82-1A8F-450D-B3F5-05D86245A20F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.1-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "6CDAC7C9-022F-4900-BA2B-E226118390B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "C7AD2FFF-C115-4B55-8FBE-7C53CE7F3E78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "E439577C-3E3C-4233-9276-B26C242F2ABC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "18D07534-D124-4A3F-BFC2-347E7D25B9C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "4419CE5F-6093-49F1-B400-3CADB1EA8017",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu5:*:*:*:*:*:*:*",
"matchCriteriaId": "E4EFA888-6A84-48A7-A1F5-6EA1A602940E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu6:*:*:*:*:*:*:*",
"matchCriteriaId": "3B7DA437-17C5-4169-B296-CA924663B37F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu7:*:*:*:*:*:*:*",
"matchCriteriaId": "39555DE8-5AE0-46DC-9DB5-56808D2D54A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu8:*:*:*:*:*:*:*",
"matchCriteriaId": "5666D2A8-C212-4616-A62B-60C6FABB6679",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu9:*:*:*:*:*:*:*",
"matchCriteriaId": "AB25DCC8-6FC7-4138-90AC-FAFF65E6DA10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "CE54A967-E6CB-4975-93E2-B74D0F34816C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "C6381C1D-994D-49E9-886F-9AAAEC01F72C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "7083F188-39C9-4A0F-B379-DBAA7C1F3E7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "55710F53-487F-40CD-941C-BC2BA837C2D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "754BC407-2C75-443F-A0A5-2081EED7628A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "B7E607C3-7E63-42A4-BE0E-3DFE3B9DD700",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "FC25ED5C-B1A4-4104-A0C9-633FB58F6596",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "04C71AA4-574A-4C32-97C3-D7291EF18B2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "46F1A838-4379-4CC4-BEAD-EC9C793B4E56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "1CA3903E-EA8B-4B78-B5CF-42C4AA6626C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FFCDD843-C743-41E4-8743-62C6149B7BBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "59FA4F13-3CF6-412B-846F-AE7D57B5FAEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0BF1FE3C-DCF6-475F-BFFB-D445B960CA26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "B2AEEADF-89B1-465A-ACCE-61B8F64BD8A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "1EBB7136-7802-4DB5-84AF-C75CBFFA5A3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "404DDAC7-952E-43FF-8EEB-FA1FC1A503A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:*",
"matchCriteriaId": "63388BC6-4EE0-41E3-BC4F-A43B0C56494E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:*",
"matchCriteriaId": "7D54FC7A-CD2A-4904-A059-48A8E94954A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:*",
"matchCriteriaId": "88F73732-BEA3-45D3-ABEE-51B45C1511E3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:*",
"matchCriteriaId": "B53A64B3-7522-4B05-BA0C-BD0F429362B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:*",
"matchCriteriaId": "CF5AF908-B66A-48AD-912D-CBD02A1878A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:*",
"matchCriteriaId": "FF1672BA-3685-4B75-BB46-9BB181EC4959",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:*",
"matchCriteriaId": "58BB5513-D96B-4AE1-911F-40E561341859",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:*",
"matchCriteriaId": "542F64D1-EB92-41B3-A1E3-98061D1966B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:*",
"matchCriteriaId": "5EF284A8-86B0-47AB-B404-D4714D4E769A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:*",
"matchCriteriaId": "43355789-13F9-4D12-81DB-EFCEA9183F2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:*",
"matchCriteriaId": "CC67992A-E0CB-43A8-A749-D91BB460D279",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:*",
"matchCriteriaId": "12BB46F2-6B36-44A2-AE15-CDBC4AEBCD95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:*",
"matchCriteriaId": "AAD912C7-D5B2-4AB5-9C27-979E8DE805CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:*",
"matchCriteriaId": "BE7A141A-8588-4743-AB78-502A9724C474",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:*",
"matchCriteriaId": "0A282E85-A145-496B-A600-77012F24F82F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."
},
{
"lang": "es",
"value": "La vulnerabilidad de Condici\u00f3n de Carrera TOCTOU en apport permite a un atacante local escalar privilegios y ejecutar c\u00f3digo arbitrario. Un atacante puede salir del proceso bloqueado y explotar el reciclaje PID para generar un proceso root con el mismo PID que el proceso bloqueado, que luego puede ser usado para escalar privilegios. Corregido en versi\u00f3n 2.20.1-0ubuntu2.24, versiones 2.20.9 anteriores a 2.20.9-0ubuntu7.16 y versiones 2.20.11 anteriores a 2.20.11-0ubuntu27.6. Fue ZDI-CAN-11234"
}
],
"id": "CVE-2020-15702",
"lastModified": "2024-11-21T05:06:03.110",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.4,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "security@ubuntu.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-08-06T23:15:11.750",
"references": [
{
"source": "security@ubuntu.com",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1"
},
{
"source": "security@ubuntu.com",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1/"
},
{
"source": "security@ubuntu.com",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-2/"
},
{
"source": "security@ubuntu.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-2/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
}
],
"sourceIdentifier": "security@ubuntu.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-367"
}
],
"source": "security@ubuntu.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-367"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:*",
"matchCriteriaId": "F0580D85-61E7-446D-BB01-EFFD20A53FC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:*",
"matchCriteriaId": "D8DEF97E-C23C-431E-A017-29895305E666",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:*",
"matchCriteriaId": "5CF1FFD4-8088-4073-AF78-C2A177C0DFAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:*",
"matchCriteriaId": "0CC58CA6-54E2-4874-B327-838B19667FF1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:*",
"matchCriteriaId": "00060D2D-78C2-46CD-903D-48337C4A1173",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:*",
"matchCriteriaId": "7DD7604E-CEAC-4B54-A708-F98738381288",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:*",
"matchCriteriaId": "6BD91FE7-01B8-479F-8180-6E152F2996C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:*",
"matchCriteriaId": "3DCF9BD3-B46E-4D58-B53F-3DE081164FDB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:*",
"matchCriteriaId": "7F973F96-7AAD-44AB-90F0-D9F5DD7AFEE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:*",
"matchCriteriaId": "5E1A19B1-592C-48CF-B709-7CA573F40AF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:*",
"matchCriteriaId": "287EA905-4DF5-4AF7-9C70-3A9CECA714C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:*",
"matchCriteriaId": "479CEDFA-177B-413D-A9C1-2A16A9F9FB50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:*",
"matchCriteriaId": "7713D34D-046F-4627-80CA-B5CD63D41F38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:*",
"matchCriteriaId": "A65605CF-2659-436E-9C96-E782F06992F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:*",
"matchCriteriaId": "F27734BE-C46A-4815-A801-1FF5493B324B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:*",
"matchCriteriaId": "8EEAE19B-2138-4AA5-BB3B-3150DF0818DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:*",
"matchCriteriaId": "0D4BE412-F045-4754-9EF8-2F00E68542A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:*",
"matchCriteriaId": "FB26172A-D9F3-47A4-AA7D-7FD2E8499670",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:*",
"matchCriteriaId": "388DDA89-BA36-45FE-864F-5810C3DF4093",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:*",
"matchCriteriaId": "3D17E8C3-56FE-4719-B214-BA369D5EB6D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4FE45751-8E63-428B-A04B-1E842FB5BEEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9381CFDA-0772-43D7-8F14-A6E0577F49EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:*",
"matchCriteriaId": "DEFB83E8-166C-4960-8AF1-DE210F4DE6DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F95414EB-487D-4E80-AE6C-CDBF0153807E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "AE3B37D5-6479-48A8-8E04-789778896053",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7A4235DE-1EF0-490E-955E-BC61F0CB82EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "34638795-2AE2-48BA-9800-2407E2617B43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "88552AC8-4BD5-4652-BB36-BEF96EDE514F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "F00DEC01-B39C-42DA-AC36-39A0A153CF44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "82D8C1AF-6C55-4FA5-8937-6797E7E441C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "E147A0DA-3A64-4DC0-BB7A-83432FDA5F1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu5:*:*:*:*:*:*:*",
"matchCriteriaId": "FD68C5DD-AF3B-42BC-AB18-E03E43A27076",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu6:*:*:*:*:*:*:*",
"matchCriteriaId": "29EE4CB4-9CFE-4672-93F3-D135F98ADD56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu7:*:*:*:*:*:*:*",
"matchCriteriaId": "812471E0-35B8-454B-B9FB-539302606C80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu8:*:*:*:*:*:*:*",
"matchCriteriaId": "EF92AC2E-8043-4126-9CC9-1EC1EE77C68E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu9:*:*:*:*:*:*:*",
"matchCriteriaId": "F07FD0B9-AFF4-47BB-B2C9-B819D8526D12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu10:*:*:*:*:*:*:*",
"matchCriteriaId": "A2A4392D-D859-4906-AFE2-EC56DCE8B85D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "6890AEDE-8628-4467-BD78-9E28BD00CFD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "A3E475D2-7643-4F90-9A39-3C4C9C5882A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "31C813DA-01A9-4963-992C-77F21B045C61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "9432E171-BD9D-41E1-AAB3-2CA29FE2B07F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:*",
"matchCriteriaId": "234375CE-6C99-4973-BAC5-950016C789A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:*",
"matchCriteriaId": "1658CA25-4EB5-40D9-A1F3-78640EE58D07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:*",
"matchCriteriaId": "DF9A6112-6920-4006-A353-30D942301D63",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "81F07BD0-2C19-4895-8B3C-F956ED7568BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "59420BB6-11ED-43BA-95FA-E843B9F0BFD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D6C7998E-269B-40B1-9B73-99F22CB76A26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "86CB2D37-78BD-486D-B27B-6E588563000D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0B452791-E4F4-4165-B15B-205743EDE142",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "29CA8420-057C-4BF1-A5A5-E65C979F80D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "6FF71FAA-2457-4B6D-8265-5E9E40FB5B46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:*",
"matchCriteriaId": "A901840D-D35C-4DBB-B736-16066BA61016",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:*",
"matchCriteriaId": "8DC8A84E-204D-46FE-9455-E6EE28CBA02D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "B170FF62-8FE1-4E32-9CAB-6C2791842D4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:*",
"matchCriteriaId": "C3112FA6-E483-4A15-83A7-0DC086680D14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:*",
"matchCriteriaId": "1A7B0688-10F5-4FCC-B4C3-804BFC9F4572",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:*",
"matchCriteriaId": "9709BC6B-6432-47D3-AF3D-7D61230528E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:*",
"matchCriteriaId": "DEFA65E9-C2C5-4068-8B19-2087F54C75E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:*",
"matchCriteriaId": "62D8AD82-1A8F-450D-B3F5-05D86245A20F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.1-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "6CDAC7C9-022F-4900-BA2B-E226118390B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "C7AD2FFF-C115-4B55-8FBE-7C53CE7F3E78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "E439577C-3E3C-4233-9276-B26C242F2ABC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "18D07534-D124-4A3F-BFC2-347E7D25B9C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu4:*:*:*:*:*:*:*",
"matchCriteriaId": "4419CE5F-6093-49F1-B400-3CADB1EA8017",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu5:*:*:*:*:*:*:*",
"matchCriteriaId": "E4EFA888-6A84-48A7-A1F5-6EA1A602940E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu6:*:*:*:*:*:*:*",
"matchCriteriaId": "3B7DA437-17C5-4169-B296-CA924663B37F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu7:*:*:*:*:*:*:*",
"matchCriteriaId": "39555DE8-5AE0-46DC-9DB5-56808D2D54A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu8:*:*:*:*:*:*:*",
"matchCriteriaId": "5666D2A8-C212-4616-A62B-60C6FABB6679",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu9:*:*:*:*:*:*:*",
"matchCriteriaId": "AB25DCC8-6FC7-4138-90AC-FAFF65E6DA10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "CE54A967-E6CB-4975-93E2-B74D0F34816C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "C6381C1D-994D-49E9-886F-9AAAEC01F72C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "7083F188-39C9-4A0F-B379-DBAA7C1F3E7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "55710F53-487F-40CD-941C-BC2BA837C2D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "754BC407-2C75-443F-A0A5-2081EED7628A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "B7E607C3-7E63-42A4-BE0E-3DFE3B9DD700",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "FC25ED5C-B1A4-4104-A0C9-633FB58F6596",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu3:*:*:*:*:*:*:*",
"matchCriteriaId": "04C71AA4-574A-4C32-97C3-D7291EF18B2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:*",
"matchCriteriaId": "46F1A838-4379-4CC4-BEAD-EC9C793B4E56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:*",
"matchCriteriaId": "1CA3903E-EA8B-4B78-B5CF-42C4AA6626C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FFCDD843-C743-41E4-8743-62C6149B7BBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "59FA4F13-3CF6-412B-846F-AE7D57B5FAEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0BF1FE3C-DCF6-475F-BFFB-D445B960CA26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "B2AEEADF-89B1-465A-ACCE-61B8F64BD8A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "1EBB7136-7802-4DB5-84AF-C75CBFFA5A3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "404DDAC7-952E-43FF-8EEB-FA1FC1A503A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:*",
"matchCriteriaId": "63388BC6-4EE0-41E3-BC4F-A43B0C56494E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:*",
"matchCriteriaId": "7D54FC7A-CD2A-4904-A059-48A8E94954A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:*",
"matchCriteriaId": "88F73732-BEA3-45D3-ABEE-51B45C1511E3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:*",
"matchCriteriaId": "B53A64B3-7522-4B05-BA0C-BD0F429362B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:*",
"matchCriteriaId": "CF5AF908-B66A-48AD-912D-CBD02A1878A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:*",
"matchCriteriaId": "FF1672BA-3685-4B75-BB46-9BB181EC4959",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:*",
"matchCriteriaId": "58BB5513-D96B-4AE1-911F-40E561341859",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:*",
"matchCriteriaId": "542F64D1-EB92-41B3-A1E3-98061D1966B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:*",
"matchCriteriaId": "5EF284A8-86B0-47AB-B404-D4714D4E769A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:*",
"matchCriteriaId": "43355789-13F9-4D12-81DB-EFCEA9183F2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:*",
"matchCriteriaId": "CC67992A-E0CB-43A8-A749-D91BB460D279",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:*",
"matchCriteriaId": "12BB46F2-6B36-44A2-AE15-CDBC4AEBCD95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:*",
"matchCriteriaId": "AAD912C7-D5B2-4AB5-9C27-979E8DE805CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:*",
"matchCriteriaId": "BE7A141A-8588-4743-AB78-502A9724C474",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:*",
"matchCriteriaId": "0A282E85-A145-496B-A600-77012F24F82F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."
},
{
"lang": "es",
"value": "La vulnerabilidad de Condici\u00f3n de Carrera TOCTOU en apport permite a un atacante local escalar privilegios y ejecutar c\u00f3digo arbitrario. Un atacante puede salir del proceso bloqueado y explotar el reciclaje PID para generar un proceso root con el mismo PID que el proceso bloqueado, que luego puede ser usado para escalar privilegios. Corregido en versi\u00f3n 2.20.1-0ubuntu2.24, versiones 2.20.9 anteriores a 2.20.9-0ubuntu7.16 y versiones 2.20.11 anteriores a 2.20.11-0ubuntu27.6. Fue ZDI-CAN-11234"
}
],
"id": "CVE-2020-15702",
"lastModified": "2025-11-03T20:15:44.883",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.4,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "security@ubuntu.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-08-06T23:15:11.750",
"references": [
{
"source": "security@ubuntu.com",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1"
},
{
"source": "security@ubuntu.com",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1/"
},
{
"source": "security@ubuntu.com",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-2/"
},
{
"source": "security@ubuntu.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2025/Jun/9"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://usn.ubuntu.com/4449-2/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"
}
],
"sourceIdentifier": "security@ubuntu.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-367"
}
],
"source": "security@ubuntu.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-367"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2025-08-07T23:38:23Z",
"cve": "CVE-2020-15702",
"id": "CVE-2020-15702",
"initial_release_date": "2023-02-15T03:56:32Z",
"product_status:known_affected": "2",
"product_status:known_not_affected": "3",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2020-15702",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2020-15702.json",
"version": "9"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…