APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;
References
Link | Resource |
---|---|
https://bugs.launchpad.net/bugs/1899193 | Broken Link |
https://security.netapp.com/advisory/ntap-20210108-0005/ | Third Party Advisory |
https://usn.ubuntu.com/usn/usn-4667-1 | Vendor Advisory |
https://www.debian.org/security/2020/dsa-4808 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
History
29 Oct 2022, 02:41
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:* |
|
First Time |
Netapp solidfire Baseboard Management Controller Firmware
Netapp Netapp solidfire Baseboard Management Controller |
|
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20210108-0005/ - Third Party Advisory |
08 Jan 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2020-12-10 04:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-27350
Mitre link : CVE-2020-27350
CVE.ORG link : CVE-2020-27350
JSON object : View
Products Affected
canonical
- ubuntu_linux
debian
- advanced_package_tool
- debian_linux
netapp
- solidfire_baseboard_management_controller_firmware
- solidfire_baseboard_management_controller
CWE
CWE-190
Integer Overflow or Wraparound