Aller au contenu
en Se connecter
2.0 Faible

CVE-2020-27351 Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc,…

Description

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prior to 1.6.5ubuntu0.4; 2.0.0ubuntu0 versions prior to 2.0.0ubuntu0.20.04.2; 2.1.3ubuntu1 versions prior to 2.1.3ubuntu1.1;

Produits et versions touchés

Produit Versions touchées Corrigé en
Python-apt 2.1 2.1.3ubuntu1 → < 2.1.3ubuntu1.1 2.1.3ubuntu1.1
Python-apt 2.0 2.0.0ubuntu0 → < 2.0.0ubuntu0.20.04.2 2.0.0ubuntu0.20.04.2
Python-apt 1.6 1.6.5ubuntu0 → < 1.6.5ubuntu0.4 1.6.5ubuntu0.4

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Python-apt

Les 4 CVE de Python-apt →
CVE-2025-6966 NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to… 6.9 Moyenne CVE-2019-15795 python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of… 4.7 Moyenne CVE-2019-15796 Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py… 4.7 Moyenne
Suivre cette CVE