CVE-2020-11936 (GCVE-0-2020-11936)

Vulnerability from cvelistv5 – Published: 2025-01-31 01:18 – Updated: 2025-02-07 16:08
VLAI
Summary
gdbus setgid privilege escalation
SSVC
Exploitation: poc Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-07 15:58 UTC
References
Impacted products
Vendor Product Version CPE status
Canonical Ltd. Apport Affected: 0 , < 2.20.11-0ubuntu27.6 (semver)
guessed Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-11936",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-07T15:58:53.328091Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-07T16:08:28.466Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "packageName": "apport",
          "platforms": [
            "Linux"
          ],
          "product": "Apport",
          "repo": "https://github.com/canonical/apport",
          "vendor": "Canonical Ltd.",
          "versions": [
            {
              "lessThan": "2.20.11-0ubuntu27.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ryota Shiga"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "gdbus setgid privilege escalation"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-31T01:34:55.184Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11936"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2020-11936",
    "datePublished": "2025-01-31T01:18:21.509Z",
    "dateReserved": "2020-04-20T00:00:00.000Z",
    "dateUpdated": "2025-02-07T16:08:28.466Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2020-11936",
      "date": "2026-09-23",
      "epss": "0.00343",
      "percentile": "0.27903"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "46F1A838-4379-4CC4-BEAD-EC9C793B4E56",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1CA3903E-EA8B-4B78-B5CF-42C4AA6626C6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FFCDD843-C743-41E4-8743-62C6149B7BBC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59FA4F13-3CF6-412B-846F-AE7D57B5FAEF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0BF1FE3C-DCF6-475F-BFFB-D445B960CA26",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B2AEEADF-89B1-465A-ACCE-61B8F64BD8A1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1EBB7136-7802-4DB5-84AF-C75CBFFA5A3A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "404DDAC7-952E-43FF-8EEB-FA1FC1A503A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "63388BC6-4EE0-41E3-BC4F-A43B0C56494E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7D54FC7A-CD2A-4904-A059-48A8E94954A5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "88F73732-BEA3-45D3-ABEE-51B45C1511E3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B53A64B3-7522-4B05-BA0C-BD0F429362B8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CF5AF908-B66A-48AD-912D-CBD02A1878A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FF1672BA-3685-4B75-BB46-9BB181EC4959",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.15:*:*:*:*:*:*:*",
                    "matchCriteriaId": "58BB5513-D96B-4AE1-911F-40E561341859",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "542F64D1-EB92-41B3-A1E3-98061D1966B0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.17:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5EF284A8-86B0-47AB-B404-D4714D4E769A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.18:*:*:*:*:*:*:*",
                    "matchCriteriaId": "43355789-13F9-4D12-81DB-EFCEA9183F2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.19:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC67992A-E0CB-43A8-A749-D91BB460D279",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.20:*:*:*:*:*:*:*",
                    "matchCriteriaId": "12BB46F2-6B36-44A2-AE15-CDBC4AEBCD95",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AAD912C7-D5B2-4AB5-9C27-979E8DE805CA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.22:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BE7A141A-8588-4743-AB78-502A9724C474",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.1-0ubuntu2.23:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0A282E85-A145-496B-A600-77012F24F82F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6890AEDE-8628-4467-BD78-9E28BD00CFD9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A3E475D2-7643-4F90-9A39-3C4C9C5882A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "31C813DA-01A9-4963-992C-77F21B045C61",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9432E171-BD9D-41E1-AAB3-2CA29FE2B07F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "234375CE-6C99-4973-BAC5-950016C789A9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1658CA25-4EB5-40D9-A1F3-78640EE58D07",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DF9A6112-6920-4006-A353-30D942301D63",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "81F07BD0-2C19-4895-8B3C-F956ED7568BB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59420BB6-11ED-43BA-95FA-E843B9F0BFD3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6C7998E-269B-40B1-9B73-99F22CB76A26",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "86CB2D37-78BD-486D-B27B-6E588563000D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0B452791-E4F4-4165-B15B-205743EDE142",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "29CA8420-057C-4BF1-A5A5-E65C979F80D3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6FF71FAA-2457-4B6D-8265-5E9E40FB5B46",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A901840D-D35C-4DBB-B736-16066BA61016",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8DC8A84E-204D-46FE-9455-E6EE28CBA02D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B170FF62-8FE1-4E32-9CAB-6C2791842D4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C3112FA6-E483-4A15-83A7-0DC086680D14",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1A7B0688-10F5-4FCC-B4C3-804BFC9F4572",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9709BC6B-6432-47D3-AF3D-7D61230528E8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DEFA65E9-C2C5-4068-8B19-2087F54C75E2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.9-0ubuntu7.15:*:*:*:*:*:*:*",
                    "matchCriteriaId": "62D8AD82-1A8F-450D-B3F5-05D86245A20F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F0580D85-61E7-446D-BB01-EFFD20A53FC7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D8DEF97E-C23C-431E-A017-29895305E666",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5CF1FFD4-8088-4073-AF78-C2A177C0DFAD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0CC58CA6-54E2-4874-B327-838B19667FF1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "00060D2D-78C2-46CD-903D-48337C4A1173",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7DD7604E-CEAC-4B54-A708-F98738381288",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6BD91FE7-01B8-479F-8180-6E152F2996C7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu15:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3DCF9BD3-B46E-4D58-B53F-3DE081164FDB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F973F96-7AAD-44AB-90F0-D9F5DD7AFEE2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu17:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5E1A19B1-592C-48CF-B709-7CA573F40AF0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu18:*:*:*:*:*:*:*",
                    "matchCriteriaId": "287EA905-4DF5-4AF7-9C70-3A9CECA714C3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu19:*:*:*:*:*:*:*",
                    "matchCriteriaId": "479CEDFA-177B-413D-A9C1-2A16A9F9FB50",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu20:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7713D34D-046F-4627-80CA-B5CD63D41F38",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A65605CF-2659-436E-9C96-E782F06992F8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu22:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F27734BE-C46A-4815-A801-1FF5493B324B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu23:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8EEAE19B-2138-4AA5-BB3B-3150DF0818DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu24:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0D4BE412-F045-4754-9EF8-2F00E68542A0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu25:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FB26172A-D9F3-47A4-AA7D-7FD2E8499670",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu26:*:*:*:*:*:*:*",
                    "matchCriteriaId": "388DDA89-BA36-45FE-864F-5810C3DF4093",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3D17E8C3-56FE-4719-B214-BA369D5EB6D8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4FE45751-8E63-428B-A04B-1E842FB5BEEE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9381CFDA-0772-43D7-8F14-A6E0577F49EF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DEFB83E8-166C-4960-8AF1-DE210F4DE6DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F95414EB-487D-4E80-AE6C-CDBF0153807E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E4B7D71B-5267-4479-B271-71363998E998",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4194EAB4-673C-4E8A-ADFC-6D87F50C61CE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B3251DCF-6CE1-4149-A328-0F9708595E79",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "73483788-45E5-4E6E-ADF5-4AD0CDF03DC2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AA91A8F7-DEE3-4A99-819D-4E188A7544E4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FF8610CF-E8B1-4172-BBCB-7A8713A2239C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9CF6BB38-C3A9-486B-97E1-263EDE2ECE70",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BE70759B-770A-44D9-9482-D6E53BA0037F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D2398113-673A-4CF3-B0DE-46061E11EB45",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.17:*:*:*:*:*:*:*",
                    "matchCriteriaId": "40F7D759-5226-4882-ACF0-B1EAB79665B9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.18:*:*:*:*:*:*:*",
                    "matchCriteriaId": "066128DE-149A-4753-ABBC-22D6278D5043",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.19:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59CB03E3-AB69-427A-A67E-F44C4B8BEC29",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu27.20:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF447FDA-8111-4C7D-B0F6-3869C086E447",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu28:*:*:*:*:*:*:*",
                    "matchCriteriaId": "136B28C2-ACB8-4399-B3B1-FFD0904FCD44",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu29:*:*:*:*:*:*:*",
                    "matchCriteriaId": "10B1E587-D25A-4763-B4DC-3D69C118A2DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu30:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1CFD1CBD-77A9-45AF-A516-FF77191311E1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu31:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BD4ADA30-8C36-4D54-ACDA-5AADAC73D19A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu32:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6EC93EA4-CEDD-4632-ABCD-532EE5886C3F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu33:*:*:*:*:*:*:*",
                    "matchCriteriaId": "69D638E0-E2EF-4E4F-8864-5E74904B4566",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu34:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0B127BDF-5F67-40AA-A9E3-B9C7CAC2A49E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu35:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C9B0DC30-62E9-4EC1-87D6-9386EC313E46",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu36:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9E44CEC7-B7E1-46D5-A731-435650CC6CAB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu37:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9FF475DE-6D99-4116-8BB6-9925F7AD9FF8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu38:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C9DEF396-1C23-4C40-B7BD-9E114238C9E6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu39:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E3FEDE01-F111-41F8-8541-45395A59584E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu40:*:*:*:*:*:*:*",
                    "matchCriteriaId": "82DCED7B-C959-4437-85AF-4F871BEB8FA3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu41:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EC8A1AEB-B478-4BA7-B27C-231C78F5D8BD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu42:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE199F4D-531E-4B80-A51C-EAA98A200896",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:canonical:apport:2.20.11-0ubuntu43:*:*:*:*:*:*:*",
                    "matchCriteriaId": "22E737E4-19CE-47C9-A195-216671272B4B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "gdbus setgid privilege escalation"
          },
          {
            "lang": "es",
            "value": "escalada de privilegios setgid de gdbus"
          }
        ],
        "id": "CVE-2020-11936",
        "lastModified": "2025-08-26T17:49:17.170",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 3.1,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.6,
              "impactScore": 1.4,
              "source": "security@ubuntu.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2025-01-31T02:15:28.290",
        "references": [
          {
            "source": "security@ubuntu.com",
            "tags": [
              "Exploit",
              "Issue Tracking"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633"
          },
          {
            "source": "security@ubuntu.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.cve.org/CVERecord?id=CVE-2020-11936"
          }
        ],
        "sourceIdentifier": "security@ubuntu.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2020-11936",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-02-07T15:58:53.328091Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "description": "CWE-noinfo Not enough information",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-02-07T15:58:10.888Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "packageName": "apport",
              "platforms": [
                "Linux"
              ],
              "product": "Apport",
              "repo": "https://github.com/canonical/apport",
              "vendor": "Canonical Ltd.",
              "versions": [
                {
                  "lessThan": "2.20.11-0ubuntu27.6",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Ryota Shiga"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "gdbus setgid privilege escalation"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 3.1,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-01-31T01:34:55.184Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "tags": [
                "issue-tracking"
              ],
              "url": "https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633"
            },
            {
              "tags": [
                "issue-tracking"
              ],
              "url": "https://www.cve.org/CVERecord?id=CVE-2020-11936"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2020-11936",
        "datePublished": "2025-01-31T01:18:21.509Z",
        "dateReserved": "2020-04-20T00:00:00.000Z",
        "dateUpdated": "2025-02-07T16:08:28.466Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…