← Back

CVE-2020-15701

nvd nist
Published: Aug 6, 2020Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.

Affected (104)

2 products
Apport
Ubuntu Linux
Configuration A
24 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 2.20.11-0ubuntu10
Version 2.20.11-0ubuntu11
Version 2.20.11-0ubuntu12
Version 2.20.11-0ubuntu13
Version 2.20.11-0ubuntu14
Version 2.20.11-0ubuntu15
Version 2.20.11-0ubuntu16
Version 2.20.11-0ubuntu17
Version 2.20.11-0ubuntu18
Version 2.20.11-0ubuntu19
Version 2.20.11-0ubuntu20
Version 2.20.11-0ubuntu21
Version 2.20.11-0ubuntu22
Version 2.20.11-0ubuntu23
Version 2.20.11-0ubuntu24
Version 2.20.11-0ubuntu25
Version 2.20.11-0ubuntu26
Version 2.20.11-0ubuntu27.2
Version 2.20.11-0ubuntu27.3
Version 2.20.11-0ubuntu27.4
Version 2.20.11-0ubuntu27.5
Version 2.20.11-0ubuntu27
Version 2.20.11-0ubuntu8
Version 2.20.11-0ubuntu9
Configuration B
35 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 2.20.7-0ubuntu3.1
Version 2.20.7-0ubuntu3
Version 2.20.7-0ubuntu4
Version 2.20.8-0ubuntu10
Version 2.20.8-0ubuntu1
Version 2.20.8-0ubuntu2
Version 2.20.8-0ubuntu3
Version 2.20.8-0ubuntu4
Version 2.20.8-0ubuntu5
Version 2.20.8-0ubuntu6
Version 2.20.8-0ubuntu7
Version 2.20.8-0ubuntu8
Version 2.20.8-0ubuntu9
Version 2.20.9-0ubuntu1
Version 2.20.9-0ubuntu2
Version 2.20.9-0ubuntu3
Version 2.20.9-0ubuntu4
Version 2.20.9-0ubuntu5
Version 2.20.9-0ubuntu6
Version 2.20.9-0ubuntu7.10
Version 2.20.9-0ubuntu7.11
Version 2.20.9-0ubuntu7.12
Version 2.20.9-0ubuntu7.13
Version 2.20.9-0ubuntu7.14
Version 2.20.9-0ubuntu7.15
Version 2.20.9-0ubuntu7.1
Version 2.20.9-0ubuntu7.2
Version 2.20.9-0ubuntu7.3
Version 2.20.9-0ubuntu7.4
Version 2.20.9-0ubuntu7.5
Version 2.20.9-0ubuntu7.6
Version 2.20.9-0ubuntu7.7
Version 2.20.9-0ubuntu7.8
Version 2.20.9-0ubuntu7.9
Version 2.20.9-0ubuntu7
Configuration C
41 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Canonical
Version 2.19.1-0ubuntu3
Version 2.19.2-0ubuntu1
Version 2.19.2-0ubuntu2
Version 2.19.2-0ubuntu3
Version 2.19.2-0ubuntu4
Version 2.19.2-0ubuntu5
Version 2.19.2-0ubuntu6
Version 2.19.2-0ubuntu7
Version 2.19.2-0ubuntu8
Version 2.19.2-0ubuntu9
Version 2.19.3-0ubuntu1
Version 2.19.3-0ubuntu2
Version 2.19.3-0ubuntu3
Version 2.19.4-0ubuntu1
Version 2.19.4-0ubuntu2
Version 2.20-0ubuntu1
Version 2.20-0ubuntu2
Version 2.20-0ubuntu3
Version 2.20.1-0ubuntu1
Version 2.20.1-0ubuntu2.10
Version 2.20.1-0ubuntu2.12
Version 2.20.1-0ubuntu2.13
Version 2.20.1-0ubuntu2.14
Version 2.20.1-0ubuntu2.15
Version 2.20.1-0ubuntu2.16
Version 2.20.1-0ubuntu2.17
Version 2.20.1-0ubuntu2.18
Version 2.20.1-0ubuntu2.19
Version 2.20.1-0ubuntu2.1
Version 2.20.1-0ubuntu2.20
Version 2.20.1-0ubuntu2.21
Version 2.20.1-0ubuntu2.22
Version 2.20.1-0ubuntu2.23
Version 2.20.1-0ubuntu2.2
Version 2.20.1-0ubuntu2.4
Version 2.20.1-0ubuntu2.5
Version 2.20.1-0ubuntu2.6
Version 2.20.1-0ubuntu2.7
Version 2.20.1-0ubuntu2.8
Version 2.20.1-0ubuntu2.9
Version 2.20.1-0ubuntu2
Running on/withPlatform Versions
Canonical
Ubuntu Linux
Version 16.04
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 14.04
Version 16.04
Version 18.04
Version 20.04

References (8)

Source: security@ubuntu.com
ExploitIssue TrackingThird Party Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.