Summary
Riccardo Schirone discovered that psutil incorrectly handled certain
reference counting operations. An attacker could use this issue to cause
psutil to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | python-psutil | 3.4.2-1ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | python-psutil | 5.4.2-1ubuntu0.1 |
Vulnerabilities 1
-
High 7.5
Double Free in psutil
psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.
References
-
report
https://ubuntu.com/security/CVE-2019-18874