ZDI-20-979: Canonical Ubuntu apport Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the apport package. The issue results from the lack of proper locking when performing operations on a file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of root.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu Unattended Upgrades |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-20-979?
The severity of ZDI-20-979 is classified as a high-severity privilege escalation vulnerability affecting Ubuntu.
How do I fix ZDI-20-979?
To fix ZDI-20-979, update your Ubuntu system to the latest version that addresses this vulnerability.
What systems are affected by ZDI-20-979?
ZDI-20-979 specifically affects installations of Canonical Ubuntu using the vulnerable version of libdevmapper1.02.1.
Who can exploit ZDI-20-979?
A local attacker with low-privileged code execution capabilities can exploit ZDI-20-979 to escalate their privileges.
What components are involved in ZDI-20-979?
The vulnerability in ZDI-20-979 is associated with the libdevmapper1.02.1 component within Ubuntu.
- agent/type
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-979
- alias/ZDI-CAN-11234
- alias/CVE-2020-15702
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/canonical
- canonical/ubuntu unattended upgrades