Vulnerability · Published Aug 6, 2020 · Assigned by canonical

CVE-2020-15702TOCTOU in apport

High 7.0

In plain English

A high-severity security flaw in apport from Canonical. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 3.1)7.0High

Exploit odds (30 days)0.5%top 57.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.

Affected products (as reported)

Vendor	Product	Versions
Canonical	apport	2.20.1 – before 2.20.1-0ubuntu2.242.20.9 – before 2.20.9-0ubuntu7.162.20.11 – before 2.20.11-0ubuntu27.6

Weakness: CWE-367 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://usn.ubuntu.com/4449-1 x_refsource_CONFIRM
USN-4449-1 vendor-advisory, x_refsource_UBUNTU
https://www.zerodayinitiative.com/advisories/ZDI-20-979/ x_refsource_MISC
USN-4449-2 vendor-advisory, x_refsource_UBUNTU
http://seclists.org/fulldisclosure/2025/Jun/9