CVE-2020-15704

The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubuntu1.16.04.3, 2.4.7-2+2ubuntu1.3, 2.4.7-2+4.1ubuntu5.1, 2.4.7-2+4.1ubuntu6. Was ZDI-CAN-11504.

• CWE-200
• CWE-20

• https://ubuntu.com/security/notices/USN-4451-1Vendor Advisory
• https://ubuntu.com/security/notices/USN-4451-2Vendor Advisory
• https://ubuntu.com/security/notices/USN-4451-1Vendor Advisory
• https://ubuntu.com/security/notices/USN-4451-2Vendor Advisory

Published

Sep 1, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15699An issue was discovered in Joomla! through 3.9.19. Missing v…5.3
• CVE-2020-1570A remote code execution vulnerability exists in the way that…7.5
• CVE-2020-15700An issue was discovered in Joomla! through 3.9.19. A missing…6.3
• CVE-2020-15701An unhandled exception in check_ignored() in apport/report.p…5.5
• CVE-2020-15702TOCTOU Race Condition vulnerability in apport allows a local…7
• CVE-2020-15703There is no input validation on the Locale property in an ap…3.3
• CVE-2020-15705GRUB2 fails to validate kernel signature when booted directl…6.4
• CVE-2020-15706GRUB2 contains a race condition in grub_script_function_crea…6.4
• CVE-2020-15707Integer overflows were discovered in the functions grub_cmd_…6.4
• CVE-2020-15708Ubuntu's packaging of libvirt in 20.04 LTS created a control…7.8
• CVE-2020-15709Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.1…5.5
• CVE-2020-1571An elevation of privilege vulnerability exists in Windows Se…7.3