Skip to content
OpenAdvisories
Medium USN-4667-2 1 CVE

apt vulnerability

Published Jan 11, 2021 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

USN-4667-1 fixed a vulnerability in APT. This update provides
the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Kevin Backhouse discovered that APT incorrectly handled certain packages.
A local attacker could possibly use this issue to cause APT to crash or
stop responding, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS apt 1.0.1ubuntu2.24+esm3

Vulnerabilities 1

  • Medium 5.7
    CVE-2020-27350

    apt integer wraparound

    APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior …

    Canonical apt apt apt Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-27350