CVE-2020-15702 HIGH

CVE-2020-15702: TOCTOU in apport

Vendor Canonical
Product apport
Weakness CWE-367
Published August 6, 2020
Last update November 3, 2025
View on NVD All CVEs

CVSS base score

7.0/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.

Key dates

02Disclosure timeline

August 6, 2020 CVE published
November 3, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-34224 Parse Server: MFA single-use token bypass via concurrent authData login requests CVE-2025-48818 Windows BitLocker Security Feature Bypass Vulnerability CVE-2025-46328 NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file CVE-2026-2638 X-VPN macOS website versions - Local Privilege Escalation CVE-2025-64180 Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)