{"id":"CVE-2020-15702","details":"TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.","modified":"2026-03-15T22:34:18.136567Z","published":"2020-08-06T23:15:11.750Z","references":[{"type":"WEB","url":"http://seclists.org/fulldisclosure/2025/Jun/9"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4449-1/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4449-2/"},{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-979/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4449-1"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu8"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu10"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu11"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu12"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu13"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu14"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu15"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu16"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu17"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu18"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu19"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu20"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu21"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu22"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu23"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu24"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu25"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu26"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu27"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu27.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu27.3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu27.4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.11-0ubuntu27.5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.7-0ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.7-0ubuntu3.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.7-0ubuntu4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu6"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu7"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu8"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.8-0ubuntu10"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu6"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.6"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.7"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.8"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.10"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.11"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.12"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.13"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.14"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.9-0ubuntu7.15"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.1-0ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu6"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu7"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu8"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.2-0ubuntu9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.3-0ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.3-0ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.3-0ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.4-0ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.19.4-0ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20-0ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20-0ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20-0ubuntu3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.6"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.7"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.8"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.10"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.12"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.13"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.14"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.15"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.16"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.17"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.18"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.19"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.20"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.21"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.22"}]},{"events":[{"introduced":"0"},{"last_affected":"2.20.1-0ubuntu2.23"}]},{"events":[{"introduced":"0"},{"last_affected":"14.04"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15702.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}