CVE-2020-15701

 

Published at: - 07-08-2020 01:15

Last modified: - 24-01-2023 03:45

Total changes: - 2

Description

An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.html, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://launchpad.net/bugs/1877023
• https://usn.ubuntu.com/4449-1
• USN-4449-1-Vendor Advisory
• USN-4449-2-Vendor Advisory

 

Keywords

NVD

 

CVE-2020-15701

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures