CVE-2020-27350

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;

CVSS v3 5.7 MEDIUM
CVSS v2.0 4.6 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.5 / Impact : 3.7

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://bugs.launchpad.net/bugs/1899193	Broken Link
https://security.netapp.com/advisory/ntap-20210108-0005/	Third Party Advisory
https://usn.ubuntu.com/usn/usn-4667-1	Vendor Advisory
https://www.debian.org/security/2020/dsa-4808	Vendor Advisory
https://bugs.launchpad.net/bugs/1899193	Broken Link
https://security.netapp.com/advisory/ntap-20210108-0005/	Third Party Advisory
https://usn.ubuntu.com/usn/usn-4667-1	Vendor Advisory
https://www.debian.org/security/2020/dsa-4808	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.10:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:21

Type	Values Removed	Values Added
References	~~() https://bugs.launchpad.net/bugs/1899193 - Broken Link~~	() https://bugs.launchpad.net/bugs/1899193 - Broken Link
References	~~() https://security.netapp.com/advisory/ntap-20210108-0005/ - Third Party Advisory~~	() https://security.netapp.com/advisory/ntap-20210108-0005/ - Third Party Advisory
References	~~() https://usn.ubuntu.com/usn/usn-4667-1 - Vendor Advisory~~	() https://usn.ubuntu.com/usn/usn-4667-1 - Vendor Advisory
References	~~() https://www.debian.org/security/2020/dsa-4808 - Vendor Advisory~~	() https://www.debian.org/security/2020/dsa-4808 - Vendor Advisory

Information

Published : 2020-12-10 04:15

Updated : 2024-11-21 05:21

NVD link : CVE-2020-27350

Mitre link : CVE-2020-27350

CVE.ORG link : CVE-2020-27350

JSON object : View

Products Affected

canonical

ubuntu_linux

debian

advanced_package_tool
debian_linux

netapp

solidfire_baseboard_management_controller
solidfire_baseboard_management_controller_firmware

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2020-27350", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "security@ubuntu.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 1.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 1.5}]}, "published": "2020-12-10T04:15:11.423", "references": [{"url": "https://bugs.launchpad.net/bugs/1899193", "tags": ["Broken Link"], "source": "security@ubuntu.com"}, {"url": "https://security.netapp.com/advisory/ntap-20210108-0005/", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://usn.ubuntu.com/usn/usn-4667-1", "tags": ["Vendor Advisory"], "source": "security@ubuntu.com"}, {"url": "https://www.debian.org/security/2020/dsa-4808", "tags": ["Vendor Advisory"], "source": "security@ubuntu.com"}, {"url": "https://bugs.launchpad.net/bugs/1899193", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20210108-0005/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/usn/usn-4667-1", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.debian.org/security/2020/dsa-4808", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@ubuntu.com", "description": [{"lang": "en", "value": "CWE-190"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;"}, {"lang": "es", "value": "APT tuvo varios desbordamientos y subdesbordamientos de enteros al analizar paquetes .deb, tambi\u00e9n se conocen como GHSL-2020-168 GHSL-2020-169, en los archivos apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. Este problema afecta: apt versiones 1.2.32ubuntu0 anteriores a 1.2.32ubuntu0.2; versiones 1.6.12ubuntu0 anteriores a 1.6.12ubuntu0.2; versiones 2.0.2ubuntu0 anteriores a 2.0.2ubuntu0.2; versiones 2.1.10ubuntu0 anteriores a 2.1.10ubuntu0.1;"}], "lastModified": "2024-11-21T05:21:02.867", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "839A276F-A612-435F-8B32-9CD0881A703F", "versionEndExcluding": "1.2.32ubuntu0.2", "versionStartIncluding": "1.2.32ubuntu0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "vulnerable": false, "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32808FF1-724F-42B2-8720-F03F2DCB87E8", "versionEndExcluding": "1.6.12ubuntu0.2", "versionStartIncluding": "1.6.12ubuntu0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "vulnerable": false, "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84E29564-98E9-4F1E-B86C-7F835BDF47CF", "versionEndExcluding": "2.0.2ubuntu0.2", "versionStartIncluding": "2.0.2ubuntu0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*", "vulnerable": false, "matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "423237C5-087E-4E29-8B3B-D7121302E698", "versionEndExcluding": "2.1.10ubuntu0.2", "versionStartIncluding": "2.1.10ubuntu0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.10:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "338B3AAC-C147-4A31-95E7-6E8A6FB4B3FC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91DB2AC6-4123-412A-BBCB-C8545A292E30", "versionEndExcluding": "1.8.2.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "090AA6F4-4404-4E26-82AB-C3A22636F276"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@ubuntu.com"}