Canonical · Apport · CVE-2020-15701
**Name of the Vulnerable Software and Affected Versions**
apport versions prior to 2.20.1-0ubuntu2.24
apport versions prior to 2.20.9-0ubuntu7.16
apport versions prior to 2.20.11-0ubuntu27.6
**Description**
The issue is related to an unhandled exception in the `check ignored()` function in apport/report.py, which can be exploited by a local attacker to cause a denial of service. Specifically, if the `mtime` attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash.
**Recommendations**
For versions prior to 2.20.1-0ubuntu2.24, update to version 2.20.1-0ubuntu2.24 or later.
For versions prior to 2.20.9-0ubuntu7.16, update to version 2.20.9-0ubuntu7.16 or later.
For versions prior to 2.20.11-0ubuntu27.6, update to version 2.20.11-0ubuntu27.6 or later.
As a temporary workaround, consider disabling the `check ignored()` function until a patch is available.