Published: 10/12/2020 Updated: 29/10/2022

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.7 | Impact Score: 3.7 | Exploitability Score: 1.5

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions before 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions before 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions before 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions before 2.1.10ubuntu0.1;

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian advanced_package_tool
netapp solidfire_baseboard_management_controller_firmware -

It was discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could cause out-of-bounds reads or infinite loops, resulting in denial of service when processing malformed deb files For the stable distribution (buster), this problem has been fixed in version 1822 We recommend that you upgra ...

Creates PolicyReports based on the different Trivy Operator CRDs like VulnerabilityReports

Trivy Operator PolicyReport Adapter Maps Trivy Operator CRDs into the unified PolicyReport and ClusterPolicyReport from the Kubernetes Policy Working Group This makes it possible to use tooling like Policy Reporter for the different kinds of Trivy Reports Pre Requirements Trivy Operator with the related CRDs is installed and running PolicyReport CRDs are installed in your Cl

CWE-190 https://usn.ubuntu.com/usn/usn-4667-1 https://bugs.launchpad.net/bugs/1899193 https://www.debian.org/security/2020/dsa-4808 https://security.netapp.com/advisory/ntap-20210108-0005/https://nvd.nist.gov https://github.com/fjogeleit/trivy-operator-polr-adapter https://www.debian.org/security/2020/dsa-4808

CVE-2020-27350

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect