PT-2020-3489 · Canonical+1 · Apport+2

Ga_Ryo + 1 · Published 2020-08-04 · Updated 2025-11-03 · CVE-2020-15702

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions apport versions prior to 2.20.1-0ubuntu2.24 apport versions 2.20.9 prior to 2.20.9-0ubuntu7.16 apport versions 2.20.11 prior to 2.20.11-0ubuntu27.6

Description The issue exists due to insufficient checking of a shared resource's state in the apport error reporting service. This can allow an attacker to escalate privileges and execute arbitrary code. An attacker may exploit PID recycling to spawn a root process with the same PID as a crashed process, which can then be used to escalate privileges.

Recommendations For apport versions prior to 2.20.1-0ubuntu2.24, update to version 2.20.1-0ubuntu2.24 or later. For apport versions 2.20.9 prior to 2.20.9-0ubuntu7.16, update to version 2.20.9-0ubuntu7.16 or later. For apport versions 2.20.11 prior to 2.20.11-0ubuntu27.6, update to version 2.20.11-0ubuntu27.6 or later. As a temporary workaround, consider restricting access to the apport service to minimize the risk of exploitation.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2020-03814

CVE-2020-15702

USN-4449-1

USN-4449-2

ZDI-20-979

Affected Products

Linuxmint

Ubuntu

Apport

References · 21

• https://usn.ubuntu.com/4449-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4449-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4449-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15702 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-979 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15702 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11936 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-15702 · Security Note
• https://bdu.fstec.ru/vul/2020-03814 · Security Note
• https://ubuntu.com/security/CVE-2020-15702 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4449-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15701 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4449-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15702 · Vendor Advisory
• https://usn.ubuntu.com/4449-2 · Vendor Advisory