CVE-2020-15701CWE-755

Unhandled exception in apport

Medium · published August 6, 2020

CVSS v3.1
5.5
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2020-08-06T22:50Z
EPSS history
Timeline
  • 06 AUG 22:50Z
    Unhandled exception in apport
    cvelistv5