ZDI-20-979: Canonical Ubuntu apport Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the apport package. The issue results from the lack of proper locking when performing operations on a file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-20-979?
The severity of ZDI-20-979 is classified as a high-severity privilege escalation vulnerability affecting Ubuntu.
How do I fix ZDI-20-979?
To fix ZDI-20-979, update your Ubuntu system to the latest version that addresses this vulnerability.
What systems are affected by ZDI-20-979?
ZDI-20-979 specifically affects installations of Canonical Ubuntu using the vulnerable version of libdevmapper1.02.1.
Who can exploit ZDI-20-979?
A local attacker with low-privileged code execution capabilities can exploit ZDI-20-979 to escalate their privileges.
What components are involved in ZDI-20-979?
The vulnerability in ZDI-20-979 is associated with the libdevmapper1.02.1 component within Ubuntu.