title: TOCTOU in apport
description: TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.
problem types: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
affected:
{
product: apport
vendor: Canonical
versions:
lessThan: 2.20.1-0ubuntu2.24, status: affected, version: 2.20.1, versionType: custom
lessThan: 2.20.9-0ubuntu7.16, status: affected, version: 2.20.9, versionType: custom
lessThan: 2.20.11-0ubuntu27.6, status: affected, version: 2.20.11, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]