CVE-2020-27351

Katalog CVE

CVSS 2.8 · Low EPSS 0,40%

Kerentanan Missing Release of Resource after Effective Lifetime pada debian advanced package tool. Skor CVSS 3.1 2.8 (Low) menurut NVD.

Deskripsi (NVD)

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prior to 1.6.5ubuntu0.4; 2.0.0ubuntu0 versions prior to 2.0.0ubuntu0.20.04.2; 2.1.3ubuntu1 versions prior to 2.1.3ubuntu1.1;

Rincian

Terbit di NVD

10 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.8 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-772: Missing Release of Resource after Effective Lifetime

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 31,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://usn.ubuntu.com/usn/usn-4668-1 advisory vendor
• https://www.debian.org/security/2020/dsa-4809 advisory vendor
• https://bugs.launchpad.net/bugs/1899193 broken link