← Back

CVE-2020-27350

nvd nist
Published: Dec 10, 2020Modified: Jun 17, 2026

JSON object

Loading...
5.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Exploitability: 1.5 / Impact: 3.7
Source: NVD

Description

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;

Affected (6)

Debian
1 product
Advanced Package Tool
Netapp
1 product
Solidfire Baseboard Management Controller Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Advanced Package Tool
From 1.2.32ubuntu0 to 1.2.32ubuntu0.2
Running on/withPlatform Versions
Canonical
Ubuntu Linux
Version 16.04
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Advanced Package Tool
From 1.6.12ubuntu0 to 1.6.12ubuntu0.2
Running on/withPlatform Versions
Canonical
Ubuntu Linux
Version 18.04
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Advanced Package Tool
From 2.0.2ubuntu0 to 2.0.2ubuntu0.2
Running on/withPlatform Versions
Canonical
Ubuntu Linux
Version 20.04
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Advanced Package Tool
From 2.1.10ubuntu0 to 2.1.10ubuntu0.2
Running on/withPlatform Versions
Canonical
Ubuntu Linux
Version 20.10
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Advanced Package Tool
Before 1.8.2.2
Running on/withPlatform Versions
Debian
Debian Linux
Version 10.0
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Solidfire Baseboard Management Controller Firmware
All versions
Running on/withPlatform Versions
Netapp
Solidfire Baseboard Management Controller
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (8)

Source: security@ubuntu.com
Broken Link
Source: security@ubuntu.com
Third Party Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.