https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:57:32 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-22319 cnvd-2020-22319 https://cve.radiocsirt.org/vuln/cnvd-2020-22319 https://cve.radiocsirt.org/vuln/euvd-2026-172696 EUVD-2026-172696 https://cve.radiocsirt.org/vuln/euvd-2026-172696 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8833 <p>Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash files of size 0. A symlink with the same name as the deleted file can then be created upon which chown will be called, changing the file owner to root. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> <p>Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash files of size 0. A symlink with the same name as the deleted file can then be created upon which chown will be called, changing the file owner to root. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8833 https://cve.radiocsirt.org/vuln/ghsa-w9g5-3qgc-xmgx <p>Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash files of size 0. A symlink with the same name as the deleted file can then be created upon which chown will be called, changing the file owner to root. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> <p>Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash files of size 0. A symlink with the same name as the deleted file can then be created upon which chown will be called, changing the file owner to root. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> https://cve.radiocsirt.org/vuln/ghsa-w9g5-3qgc-xmgx https://cve.radiocsirt.org/vuln/gsd-2020-8833 gsd-2020-8833 https://cve.radiocsirt.org/vuln/gsd-2020-8833 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8833 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apport, Ubuntu:16.04:LTS: apport, Ubuntu:18.04:LTS: apport, Ubuntu:20.04:LTS: apport</p> <p>Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash files of size 0. A symlink with the same name as the deleted file can then be created upon which chown will be called, changing the file owner to root. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apport, Ubuntu:16.04:LTS: apport, Ubuntu:18.04:LTS: apport, Ubuntu:20.04:LTS: apport</p> <p>Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash files of size 0. A symlink with the same name as the deleted file can then be created upon which chown will be called, changing the file owner to root. Fixed in versions 2.20.1-0ubuntu2.23, 2.20.9-0ubuntu7.14, 2.20.11-0ubuntu8.8 and 2.20.11-0ubuntu22.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8833