CVEvulnerability
CVE-2020-15701
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-08-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-755
Description
An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.
Affected configurations
• canonical apport 2.20.11-0ubuntu8
• canonical apport 2.20.11-0ubuntu9
• canonical apport 2.20.11-0ubuntu10
• canonical apport 2.20.11-0ubuntu11
• canonical apport 2.20.11-0ubuntu12
• canonical apport 2.20.11-0ubuntu13
• canonical apport 2.20.11-0ubuntu14
• canonical apport 2.20.11-0ubuntu15
• canonical apport 2.20.11-0ubuntu16
• canonical apport 2.20.11-0ubuntu17
• canonical apport 2.20.11-0ubuntu18
• canonical apport 2.20.11-0ubuntu19
• canonical apport 2.20.11-0ubuntu20
• canonical apport 2.20.11-0ubuntu21
• canonical apport 2.20.11-0ubuntu22
• canonical apport 2.20.11-0ubuntu23
• canonical apport 2.20.11-0ubuntu24
• canonical apport 2.20.11-0ubuntu25
• canonical apport 2.20.11-0ubuntu26
• canonical apport 2.20.11-0ubuntu27
• canonical apport 2.20.11-0ubuntu27.2
• canonical apport 2.20.11-0ubuntu27.3
• canonical apport 2.20.11-0ubuntu27.4
• canonical apport 2.20.11-0ubuntu27.5
• canonical apport 2.20.7-0ubuntu3
• canonical apport 2.20.7-0ubuntu3.1
• canonical apport 2.20.7-0ubuntu4
• canonical apport 2.20.8-0ubuntu1
• canonical apport 2.20.8-0ubuntu2
• canonical apport 2.20.8-0ubuntu3
• canonical apport 2.20.8-0ubuntu4
• canonical apport 2.20.8-0ubuntu5
• canonical apport 2.20.8-0ubuntu6
• canonical apport 2.20.8-0ubuntu7
• canonical apport 2.20.8-0ubuntu8
• canonical apport 2.20.8-0ubuntu9
• canonical apport 2.20.8-0ubuntu10
• canonical apport 2.20.9-0ubuntu1
• canonical apport 2.20.9-0ubuntu2
• canonical apport 2.20.9-0ubuntu3
• canonical apport 2.20.9-0ubuntu4
• canonical apport 2.20.9-0ubuntu5
• canonical apport 2.20.9-0ubuntu6
• canonical apport 2.20.9-0ubuntu7
• canonical apport 2.20.9-0ubuntu7.1
• canonical apport 2.20.9-0ubuntu7.2
• canonical apport 2.20.9-0ubuntu7.3
• canonical apport 2.20.9-0ubuntu7.4
• canonical apport 2.20.9-0ubuntu7.5
• canonical apport 2.20.9-0ubuntu7.6
• canonical apport 2.20.9-0ubuntu7.7
• canonical apport 2.20.9-0ubuntu7.8
• canonical apport 2.20.9-0ubuntu7.9
• canonical apport 2.20.9-0ubuntu7.10
• canonical apport 2.20.9-0ubuntu7.11
• canonical apport 2.20.9-0ubuntu7.12
• canonical apport 2.20.9-0ubuntu7.13
• canonical apport 2.20.9-0ubuntu7.14
• canonical apport 2.20.9-0ubuntu7.15
• canonical apport 2.19.1-0ubuntu3
… and 44 more
Related
Weakness · CWE (1)
- CWE-755 Improper Handling of Exceptional Conditions weakness
References
- https://launchpad.net/bugs/1877023 Exploit, Issue Tracking, Third Party Advisory
- https://usn.ubuntu.com/4449-1 Vendor Advisory
- https://usn.ubuntu.com/4449-1/ Vendor Advisory
- https://usn.ubuntu.com/4449-2/ Vendor Advisory
- https://launchpad.net/bugs/1877023 Exploit, Issue Tracking, Third Party Advisory
- https://usn.ubuntu.com/4449-1 Vendor Advisory
- https://usn.ubuntu.com/4449-1/ Vendor Advisory
- https://usn.ubuntu.com/4449-2/ Vendor Advisory