An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6.
Weakness
The product does not handle or incorrectly handles an exceptional condition.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Apport | Canonical | 2.20.11-0ubuntu8 (including) | 2.20.11-0ubuntu8 (including) |
| Apport | Canonical | 2.20.11-0ubuntu9 (including) | 2.20.11-0ubuntu9 (including) |
| Apport | Canonical | 2.20.11-0ubuntu10 (including) | 2.20.11-0ubuntu10 (including) |
| Apport | Canonical | 2.20.11-0ubuntu11 (including) | 2.20.11-0ubuntu11 (including) |
| Apport | Canonical | 2.20.11-0ubuntu12 (including) | 2.20.11-0ubuntu12 (including) |
| Apport | Canonical | 2.20.11-0ubuntu13 (including) | 2.20.11-0ubuntu13 (including) |
| Apport | Canonical | 2.20.11-0ubuntu14 (including) | 2.20.11-0ubuntu14 (including) |
| Apport | Canonical | 2.20.11-0ubuntu15 (including) | 2.20.11-0ubuntu15 (including) |
| Apport | Canonical | 2.20.11-0ubuntu16 (including) | 2.20.11-0ubuntu16 (including) |
| Apport | Canonical | 2.20.11-0ubuntu17 (including) | 2.20.11-0ubuntu17 (including) |
| Apport | Canonical | 2.20.11-0ubuntu18 (including) | 2.20.11-0ubuntu18 (including) |
| Apport | Canonical | 2.20.11-0ubuntu19 (including) | 2.20.11-0ubuntu19 (including) |
| Apport | Canonical | 2.20.11-0ubuntu20 (including) | 2.20.11-0ubuntu20 (including) |
| Apport | Canonical | 2.20.11-0ubuntu21 (including) | 2.20.11-0ubuntu21 (including) |
| Apport | Canonical | 2.20.11-0ubuntu22 (including) | 2.20.11-0ubuntu22 (including) |
| Apport | Canonical | 2.20.11-0ubuntu23 (including) | 2.20.11-0ubuntu23 (including) |
| Apport | Canonical | 2.20.11-0ubuntu24 (including) | 2.20.11-0ubuntu24 (including) |
| Apport | Canonical | 2.20.11-0ubuntu25 (including) | 2.20.11-0ubuntu25 (including) |
| Apport | Canonical | 2.20.11-0ubuntu26 (including) | 2.20.11-0ubuntu26 (including) |
| Apport | Canonical | 2.20.11-0ubuntu27 (including) | 2.20.11-0ubuntu27 (including) |
| Apport | Canonical | 2.20.11-0ubuntu27.2 (including) | 2.20.11-0ubuntu27.2 (including) |
| Apport | Canonical | 2.20.11-0ubuntu27.3 (including) | 2.20.11-0ubuntu27.3 (including) |
| Apport | Canonical | 2.20.11-0ubuntu27.4 (including) | 2.20.11-0ubuntu27.4 (including) |
| Apport | Canonical | 2.20.11-0ubuntu27.5 (including) | 2.20.11-0ubuntu27.5 (including) |
| Apport | Ubuntu | bionic | * |
| Apport | Ubuntu | devel | * |
| Apport | Ubuntu | eoan | * |
| Apport | Ubuntu | esm-infra-legacy/trusty | * |
| Apport | Ubuntu | esm-infra/bionic | * |
| Apport | Ubuntu | esm-infra/focal | * |
| Apport | Ubuntu | esm-infra/xenial | * |
| Apport | Ubuntu | focal | * |
| Apport | Ubuntu | trusty | * |
| Apport | Ubuntu | trusty/esm | * |
| Apport | Ubuntu | xenial | * |