{"containers": {"cna": {"affected": [{"product": "apport", "vendor": "Canonical", "versions": [{"lessThan": "2.20.1-0ubuntu2.24", "status": "affected", "version": "2.20.1", "versionType": "custom"}, {"lessThan": "2.20.9-0ubuntu7.16", "status": "affected", "version": "2.20.9", "versionType": "custom"}, {"lessThan": "2.20.11-0ubuntu27.6", "status": "affected", "version": "2.20.11", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Ryota Shiga"}], "datePublic": "2020-08-04T00:00:00", "descriptions": [{"lang": "en", "value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-09-14T15:06:09", "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://usn.ubuntu.com/4449-1"}, {"name": "USN-4449-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "https://usn.ubuntu.com/4449-1/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"}, {"name": "USN-4449-2", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "https://usn.ubuntu.com/4449-2/"}], "source": {"advisory": "https://usn.ubuntu.com/4449-1", "discovery": "EXTERNAL"}, "title": "TOCTOU in apport", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"AKA": "", "ASSIGNER": "security@ubuntu.com", "DATE_PUBLIC": "2020-08-04T21:00:00.000Z", "ID": "CVE-2020-15702", "STATE": "PUBLIC", "TITLE": "TOCTOU in apport"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "apport", "version": {"version_data": [{"platform": "", "version_affected": "<", "version_name": "2.20.1", "version_value": "2.20.1-0ubuntu2.24"}, {"platform": "", "version_affected": "<", "version_name": "2.20.9", "version_value": "2.20.9-0ubuntu7.16"}, {"platform": "", "version_affected": "<", "version_name": "2.20.11", "version_value": "2.20.11-0ubuntu27.6"}]}}]}, "vendor_name": "Canonical"}]}}, "configuration": [], "credit": [{"lang": "eng", "value": "Ryota Shiga"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."}]}, "exploit": [], "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition"}]}]}, "references": {"reference_data": [{"name": "https://usn.ubuntu.com/4449-1", "refsource": "CONFIRM", "url": "https://usn.ubuntu.com/4449-1"}, {"name": "USN-4449-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4449-1/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"}, {"name": "USN-4449-2", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4449-2/"}]}, "solution": [], "source": {"advisory": "https://usn.ubuntu.com/4449-1", "defect": [], "discovery": "EXTERNAL"}, "work_around": []}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T13:22:30.693Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://usn.ubuntu.com/4449-1"}, {"name": "USN-4449-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "https://usn.ubuntu.com/4449-1/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"}, {"name": "USN-4449-2", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "https://usn.ubuntu.com/4449-2/"}]}]}, "cveMetadata": {"assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "assignerShortName": "canonical", "cveId": "CVE-2020-15702", "datePublished": "2020-08-06T22:50:22.871739Z", "dateReserved": "2020-07-14T00:00:00", "dateUpdated": "2024-09-16T17:28:12.244Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:*", "matchCriteriaId": "F0580D85-61E7-446D-BB01-EFFD20A53FC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:*", "matchCriteriaId": "D8DEF97E-C23C-431E-A017-29895305E666", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:*", "matchCriteriaId": "5CF1FFD4-8088-4073-AF78-C2A177C0DFAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:*", "matchCriteriaId": "0CC58CA6-54E2-4874-B327-838B19667FF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:*", "matchCriteriaId": "00060D2D-78C2-46CD-903D-48337C4A1173", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:*", "matchCriteriaId": "7DD7604E-CEAC-4B54-A708-F98738381288", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:*", "matchCriteriaId": "6BD91FE7-01B8-479F-8180-6E152F2996C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:*", "matchCriteriaId": "3DCF9BD3-B46E-4D58-B53F-3DE081164FDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:*", "matchCriteriaId": "7F973F96-7AAD-44AB-90F0-D9F5DD7AFEE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:*", "matchCriteriaId": "5E1A19B1-592C-48CF-B709-7CA573F40AF0", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:*", "matchCriteriaId": "287EA905-4DF5-4AF7-9C70-3A9CECA714C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:*", "matchCriteriaId": "479CEDFA-177B-413D-A9C1-2A16A9F9FB50", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:*", "matchCriteriaId": "7713D34D-046F-4627-80CA-B5CD63D41F38", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:*", "matchCriteriaId": "A65605CF-2659-436E-9C96-E782F06992F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:*", "matchCriteriaId": "F27734BE-C46A-4815-A801-1FF5493B324B", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:*", "matchCriteriaId": "8EEAE19B-2138-4AA5-BB3B-3150DF0818DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:*", "matchCriteriaId": "0D4BE412-F045-4754-9EF8-2F00E68542A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:*", "matchCriteriaId": "FB26172A-D9F3-47A4-AA7D-7FD2E8499670", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:*", "matchCriteriaId": "388DDA89-BA36-45FE-864F-5810C3DF4093", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:*", "matchCriteriaId": "3D17E8C3-56FE-4719-B214-BA369D5EB6D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:*", "matchCriteriaId": "4FE45751-8E63-428B-A04B-1E842FB5BEEE", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:*", "matchCriteriaId": "9381CFDA-0772-43D7-8F14-A6E0577F49EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:*", "matchCriteriaId": "DEFB83E8-166C-4960-8AF1-DE210F4DE6DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:*", "matchCriteriaId": "F95414EB-487D-4E80-AE6C-CDBF0153807E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*", "matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3:*:*:*:*:*:*:*", "matchCriteriaId": "AE3B37D5-6479-48A8-8E04-789778896053", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu3.1:*:*:*:*:*:*:*", "matchCriteriaId": "7A4235DE-1EF0-490E-955E-BC61F0CB82EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.7-0ubuntu4:*:*:*:*:*:*:*", "matchCriteriaId": "34638795-2AE2-48BA-9800-2407E2617B43", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu1:*:*:*:*:*:*:*", "matchCriteriaId": "88552AC8-4BD5-4652-BB36-BEF96EDE514F", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu2:*:*:*:*:*:*:*", "matchCriteriaId": "F00DEC01-B39C-42DA-AC36-39A0A153CF44", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu3:*:*:*:*:*:*:*", "matchCriteriaId": "82D8C1AF-6C55-4FA5-8937-6797E7E441C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu4:*:*:*:*:*:*:*", "matchCriteriaId": "E147A0DA-3A64-4DC0-BB7A-83432FDA5F1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu5:*:*:*:*:*:*:*", "matchCriteriaId": "FD68C5DD-AF3B-42BC-AB18-E03E43A27076", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu6:*:*:*:*:*:*:*", "matchCriteriaId": "29EE4CB4-9CFE-4672-93F3-D135F98ADD56", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu7:*:*:*:*:*:*:*", "matchCriteriaId": "812471E0-35B8-454B-B9FB-539302606C80", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu8:*:*:*:*:*:*:*", "matchCriteriaId": "EF92AC2E-8043-4126-9CC9-1EC1EE77C68E", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu9:*:*:*:*:*:*:*", "matchCriteriaId": "F07FD0B9-AFF4-47BB-B2C9-B819D8526D12", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.8-0ubuntu10:*:*:*:*:*:*:*", "matchCriteriaId": "A2A4392D-D859-4906-AFE2-EC56DCE8B85D", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:*", "matchCriteriaId": "6890AEDE-8628-4467-BD78-9E28BD00CFD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:*", "matchCriteriaId": "A3E475D2-7643-4F90-9A39-3C4C9C5882A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:*", "matchCriteriaId": "31C813DA-01A9-4963-992C-77F21B045C61", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:*", "matchCriteriaId": "9432E171-BD9D-41E1-AAB3-2CA29FE2B07F", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:*", "matchCriteriaId": "234375CE-6C99-4973-BAC5-950016C789A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:*", "matchCriteriaId": "1658CA25-4EB5-40D9-A1F3-78640EE58D07", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:*", "matchCriteriaId": "DF9A6112-6920-4006-A353-30D942301D63", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:*", "matchCriteriaId": "81F07BD0-2C19-4895-8B3C-F956ED7568BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:*", "matchCriteriaId": "59420BB6-11ED-43BA-95FA-E843B9F0BFD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:*", "matchCriteriaId": "D6C7998E-269B-40B1-9B73-99F22CB76A26", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:*", "matchCriteriaId": "86CB2D37-78BD-486D-B27B-6E588563000D", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:*", "matchCriteriaId": "0B452791-E4F4-4165-B15B-205743EDE142", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:*", "matchCriteriaId": "29CA8420-057C-4BF1-A5A5-E65C979F80D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:*", "matchCriteriaId": "6FF71FAA-2457-4B6D-8265-5E9E40FB5B46", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:*", "matchCriteriaId": "A901840D-D35C-4DBB-B736-16066BA61016", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:*", "matchCriteriaId": "8DC8A84E-204D-46FE-9455-E6EE28CBA02D", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:*", "matchCriteriaId": "B170FF62-8FE1-4E32-9CAB-6C2791842D4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:*", "matchCriteriaId": "C3112FA6-E483-4A15-83A7-0DC086680D14", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:*", "matchCriteriaId": "1A7B0688-10F5-4FCC-B4C3-804BFC9F4572", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:*", "matchCriteriaId": "9709BC6B-6432-47D3-AF3D-7D61230528E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:*", "matchCriteriaId": "DEFA65E9-C2C5-4068-8B19-2087F54C75E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:*", "matchCriteriaId": "62D8AD82-1A8F-450D-B3F5-05D86245A20F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:canonical:apport:2.19.1-0ubuntu3:*:*:*:*:*:*:*", "matchCriteriaId": "6CDAC7C9-022F-4900-BA2B-E226118390B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu1:*:*:*:*:*:*:*", "matchCriteriaId": "C7AD2FFF-C115-4B55-8FBE-7C53CE7F3E78", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu2:*:*:*:*:*:*:*", "matchCriteriaId": "E439577C-3E3C-4233-9276-B26C242F2ABC", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu3:*:*:*:*:*:*:*", "matchCriteriaId": "18D07534-D124-4A3F-BFC2-347E7D25B9C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu4:*:*:*:*:*:*:*", "matchCriteriaId": "4419CE5F-6093-49F1-B400-3CADB1EA8017", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu5:*:*:*:*:*:*:*", "matchCriteriaId": "E4EFA888-6A84-48A7-A1F5-6EA1A602940E", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu6:*:*:*:*:*:*:*", "matchCriteriaId": "3B7DA437-17C5-4169-B296-CA924663B37F", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu7:*:*:*:*:*:*:*", "matchCriteriaId": "39555DE8-5AE0-46DC-9DB5-56808D2D54A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu8:*:*:*:*:*:*:*", "matchCriteriaId": "5666D2A8-C212-4616-A62B-60C6FABB6679", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.2-0ubuntu9:*:*:*:*:*:*:*", "matchCriteriaId": "AB25DCC8-6FC7-4138-90AC-FAFF65E6DA10", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu1:*:*:*:*:*:*:*", "matchCriteriaId": "CE54A967-E6CB-4975-93E2-B74D0F34816C", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu2:*:*:*:*:*:*:*", "matchCriteriaId": "C6381C1D-994D-49E9-886F-9AAAEC01F72C", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.3-0ubuntu3:*:*:*:*:*:*:*", "matchCriteriaId": "7083F188-39C9-4A0F-B379-DBAA7C1F3E7C", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu1:*:*:*:*:*:*:*", "matchCriteriaId": "55710F53-487F-40CD-941C-BC2BA837C2D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.19.4-0ubuntu2:*:*:*:*:*:*:*", "matchCriteriaId": "754BC407-2C75-443F-A0A5-2081EED7628A", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu1:*:*:*:*:*:*:*", "matchCriteriaId": "B7E607C3-7E63-42A4-BE0E-3DFE3B9DD700", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu2:*:*:*:*:*:*:*", "matchCriteriaId": "FC25ED5C-B1A4-4104-A0C9-633FB58F6596", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20-0ubuntu3:*:*:*:*:*:*:*", "matchCriteriaId": "04C71AA4-574A-4C32-97C3-D7291EF18B2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:*", "matchCriteriaId": "46F1A838-4379-4CC4-BEAD-EC9C793B4E56", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:*", "matchCriteriaId": "1CA3903E-EA8B-4B78-B5CF-42C4AA6626C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:*", "matchCriteriaId": "FFCDD843-C743-41E4-8743-62C6149B7BBC", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:*", "matchCriteriaId": "59FA4F13-3CF6-412B-846F-AE7D57B5FAEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:*", "matchCriteriaId": "0BF1FE3C-DCF6-475F-BFFB-D445B960CA26", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:*", "matchCriteriaId": "B2AEEADF-89B1-465A-ACCE-61B8F64BD8A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:*", "matchCriteriaId": "1EBB7136-7802-4DB5-84AF-C75CBFFA5A3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:*", "matchCriteriaId": "404DDAC7-952E-43FF-8EEB-FA1FC1A503A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:*", "matchCriteriaId": "63388BC6-4EE0-41E3-BC4F-A43B0C56494E", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:*", "matchCriteriaId": "7D54FC7A-CD2A-4904-A059-48A8E94954A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:*", "matchCriteriaId": "88F73732-BEA3-45D3-ABEE-51B45C1511E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:*", "matchCriteriaId": "B53A64B3-7522-4B05-BA0C-BD0F429362B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:*", "matchCriteriaId": "CF5AF908-B66A-48AD-912D-CBD02A1878A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:*", "matchCriteriaId": "FF1672BA-3685-4B75-BB46-9BB181EC4959", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:*", "matchCriteriaId": "58BB5513-D96B-4AE1-911F-40E561341859", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:*", "matchCriteriaId": "542F64D1-EB92-41B3-A1E3-98061D1966B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:*", "matchCriteriaId": "5EF284A8-86B0-47AB-B404-D4714D4E769A", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:*", "matchCriteriaId": "43355789-13F9-4D12-81DB-EFCEA9183F2E", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:*", "matchCriteriaId": "CC67992A-E0CB-43A8-A749-D91BB460D279", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:*", "matchCriteriaId": "12BB46F2-6B36-44A2-AE15-CDBC4AEBCD95", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:*", "matchCriteriaId": "AAD912C7-D5B2-4AB5-9C27-979E8DE805CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:*", "matchCriteriaId": "BE7A141A-8588-4743-AB78-502A9724C474", "vulnerable": true}, {"criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:*", "matchCriteriaId": "0A282E85-A145-496B-A600-77012F24F82F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*", "matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234."}, {"lang": "es", "value": "La vulnerabilidad de Condici\u00f3n de Carrera TOCTOU en apport permite a un atacante local escalar privilegios y ejecutar c\u00f3digo arbitrario. Un atacante puede salir del proceso bloqueado y explotar el reciclaje PID para generar un proceso root con el mismo PID que el proceso bloqueado, que luego puede ser usado para escalar privilegios. Corregido en versi\u00f3n 2.20.1-0ubuntu2.24, versiones 2.20.9 anteriores a 2.20.9-0ubuntu7.16 y versiones 2.20.11 anteriores a 2.20.11-0ubuntu27.6. Fue ZDI-CAN-11234"}], "id": "CVE-2020-15702", "lastModified": "2023-01-27T18:19:56.737", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "security@ubuntu.com", "type": "Secondary"}]}, "published": "2020-08-06T23:15:11.750", "references": [{"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://usn.ubuntu.com/4449-1"}, {"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://usn.ubuntu.com/4449-1/"}, {"source": "security@ubuntu.com", "tags": ["Vendor Advisory"], "url": "https://usn.ubuntu.com/4449-2/"}, {"source": "security@ubuntu.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-979/"}], "sourceIdentifier": "security@ubuntu.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-367"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-367"}], "source": "security@ubuntu.com", "type": "Secondary"}]}

{}