CVE-2020-27351 — Various memory and file descriptor leaks in apt-python

Affected: Canonical python-apt

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prior to 1.6.5ubuntu0.4; 2.0.0ubuntu0 versions prior to 2.0.0ubuntu0.20.04.2; 2.1.3ubuntu1 versions prior to 2.1.3ubuntu1.1;

USN-4668-1 — python-apt vulnerability

Affected: Ubuntu:16.04:LTS: python-apt, Ubuntu:18.04:LTS: python-apt, Ubuntu:20.04:LTS: python-apt

Kevin Backhouse discovered that python-apt incorrectly handled resources. A local attacker could possibly use this issue to cause python-apt to consume resources, leading to a denial of service.

Most recent entries from all

CVE-2020-27351 — Various memory and file descriptor leaks in apt-python

USN-4668-1 — python-apt vulnerability