CVE-2020-15701: Canonical Apport

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.

Affected products

• Canonical Apport: version 2.20.11-0ubuntu8 only; version 2.20.11-0ubuntu9 only; version 2.20.11-0ubuntu10 only; version 2.20.11-0ubuntu11 only; version 2.20.11-0ubuntu12 only; version 2.20.11-0ubuntu13 only; …
• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 20.04 only

Published 2020-08-06. Last modified 2026-06-17.