CVE-2020-15702

moderate-risk

Published 2020-08-06

TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.0/10 High

LOCAL / HIGH complexity

Affected Products (20)

Apport

Affected Vendors

Canonical

References (9)

Vendor Advisory https://usn.ubuntu.com/4449-1

Vendor Advisory https://usn.ubuntu.com/4449-1/

Vendor Advisory https://usn.ubuntu.com/4449-2/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-20-979/

http://seclists.org/fulldisclosure/2025/Jun/9

Vendor Advisory https://usn.ubuntu.com/4449-1

Vendor Advisory https://usn.ubuntu.com/4449-1/

Vendor Advisory https://usn.ubuntu.com/4449-2/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-20-979/

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 30/34 · Critical