An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.
References
Link | Resource |
---|---|
https://launchpad.net/bugs/1877023 | Exploit Issue Tracking Third Party Advisory |
https://usn.ubuntu.com/4449-1 | Vendor Advisory |
https://usn.ubuntu.com/4449-1/ | Vendor Advisory |
https://usn.ubuntu.com/4449-2/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
|
Information
Published : 2020-08-06 16:15
Updated : 2023-01-23 18:45
NVD link : CVE-2020-15701
Mitre link : CVE-2020-15701
JSON object : View
CWE
CWE-755
Improper Handling of Exceptional Conditions
Products Affected
canonical
- apport
- ubuntu_linux