Skip to content
OpenAdvisories
Medium USN-4667-1 1 CVE

apt vulnerability

Published Dec 9, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Kevin Backhouse discovered that APT incorrectly handled certain packages.
A local attacker could possibly use this issue to cause APT to crash or
stop responding, resulting in a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS apt 1.2.32ubuntu0.2
Ubuntu · 18.04 LTS 18.04:LTS apt 1.6.12ubuntu0.2
Ubuntu · 20.04 LTS 20.04:LTS apt 2.0.2ubuntu0.2

Vulnerabilities 1

  • Medium 5.7
    CVE-2020-27350

    apt integer wraparound

    APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior …

    Canonical apt apt apt Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-27350