Privilege Escalation Vulnerability in gdbus by Ubuntu
CVE-2020-11936

3.1LOW

Key Information:

Status
Vendor
CVE Published:
31 January 2025

Summary

A privilege escalation vulnerability exists in gdbus, allowing attackers to exploit the setgid mechanism. This flaw could enable unauthorized users to gain elevated privileges, potentially leading to the compromise of system integrity. It is crucial for system administrators to patch this vulnerability in affected versions to mitigate risks associated with unauthorized access.

Affected Version(s)

Apport Linux 0 < 2.20.11-0ubuntu27.6

References

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ryota Shiga
.
CVE-2020-11936 : Privilege Escalation Vulnerability in gdbus by Ubuntu | SecurityVulnerability.io