CVE-2020-11936

Related Files

Ubuntu Security Notice USN-4449-2

Posted Sep 3, 2020

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4449-2 - USN-4449-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Ryota Shiga working with Trend Micro

tags | advisory, arbitrary, local, vulnerability

systems | linux, ubuntu

advisories | CVE-2020-11936, CVE-2020-15701, CVE-2020-15702

SHA-256 | ffb793bfff3a1b4e66e77c6a248277ad735ccb9ec98a034dab9dd52fc0c58890

Download | Favorite | View

Ubuntu Security Notice USN-4449-1

Posted Aug 5, 2020

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4449-1 - Ryota Shiga discovered that Apport incorrectly dropped privileges when making certain D-Bus calls. A local attacker could use this issue to read arbitrary files. Seong-Joong Kim discovered that Apport incorrectly parsed configuration files. A local attacker could use this issue to cause Apport to crash, resulting in a denial of service. Ryota Shiga discovered that Apport incorrectly implemented certain checks. A local attacker could use this issue to escalate privileges and run arbitrary code. Various other issues were also addressed.

tags | advisory, denial of service, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2020-11936, CVE-2020-15701, CVE-2020-15702

SHA-256 | 997c27eb7a9b6a7e119f8fc8be4aae652994ce95a1b5654a99dedbfffd974000

Download | Favorite | View