Improper Handling of Exceptional Conditions Affecting apport package, versions <2.20.11-0ubuntu27.6
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UBUNTU2004-APPORT-597266
- published 4 Aug 2020
- disclosed 6 Aug 2020
Introduced: 4 Aug 2020
CVE-2020-15701 Open this link in a new tabHow to fix?
Upgrade Ubuntu:20.04
apport
to version 2.20.11-0ubuntu27.6 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream apport
package and not the apport
package as distributed by Ubuntu
.
See How to fix?
for Ubuntu:20.04
relevant fixed versions and status.
An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.