CVE-2020-15701
Fixed in a distro release EPSS <1%CVSS 5.5
An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.
Products: Canonical apport
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | apport | 2.20.1-0ubuntu2.24 |
| Ubuntu 18.04 LTS | apport | 2.20.9-0ubuntu7.16 |
| Ubuntu 20.04 LTS | apport | 2.20.11-0ubuntu27.6 |
| Ubuntu Pro 14.04 LTS | apport | 2.14.1-0ubuntu3.29+esm5 |