Lucene search
K

CVE-2019-15796

🗓️ 26 Mar 2020 13:00:21Reported by canonicalType 
cve
 cve
🔗 web.nvd.nist.gov👁 96 Views

Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` allowing downloads from unsigned repositories

Related
Detection
Affected
Refs
NVD
Node
ubuntupython-aptMatch0.8.0ubuntu9
OR
ubuntupython-aptMatch0.8.1ubuntu1
OR
ubuntupython-aptMatch0.8.3ubuntu1
OR
ubuntupython-aptMatch0.8.3ubuntu2
OR
ubuntupython-aptMatch0.8.3ubuntu3
OR
ubuntupython-aptMatch0.8.3ubuntu4
OR
ubuntupython-aptMatch0.8.3ubuntu5
OR
ubuntupython-aptMatch0.8.3ubuntu6
OR
ubuntupython-aptMatch0.8.3ubuntu7
OR
ubuntupython-aptMatch0.8.3ubuntu7.1
OR
ubuntupython-aptMatch0.8.3ubuntu7.2
OR
ubuntupython-aptMatch0.8.3ubuntu7.3
AND
Node
ubuntupython-aptMatch0.8.9.1
OR
ubuntupython-aptMatch0.8.9.1ubuntu1
OROROR
ubuntupython-aptMatch0.9.1build1
OR
ubuntupython-aptMatch0.9.1build2
OR
ubuntupython-aptMatch0.9.1ubuntu1
OR
ubuntupython-aptMatch0.9.3.1
OR
ubuntupython-aptMatch0.9.3.2
OR
ubuntupython-aptMatch0.9.3.2ubuntu1
OR
ubuntupython-aptMatch0.9.3.2ubuntu2
OR
ubuntupython-aptMatch0.9.3.3
OR
ubuntupython-aptMatch0.9.3.3ubuntu1
OR
ubuntupython-aptMatch0.9.3.4
OR
ubuntupython-aptMatch0.9.3.4build1
OR
ubuntupython-aptMatch0.9.3.5
OR
ubuntupython-aptMatch0.9.3.5ubuntu1
OR
ubuntupython-aptMatch0.9.3.5ubuntu2
OR
ubuntupython-aptMatch0.9.3.5ubuntu3
AND
Node
ubuntupython-aptMatch1.0.1build1
OR
ubuntupython-aptMatch1.0.1ubuntu1
OR
ubuntupython-aptMatch1.0.1ubuntu2
OR
ubuntupython-aptMatch1.1.0beta1
OR
ubuntupython-aptMatch1.1.0beta1build1
OR
ubuntupython-aptMatch1.1.0beta1ubuntu0.16.04.1
OR
ubuntupython-aptMatch1.1.0beta1ubuntu0.16.04.2
OR
ubuntupython-aptMatch1.1.0beta1ubuntu0.16.04.3
OR
ubuntupython-aptMatch1.1.0beta1ubuntu0.16.04.4
OR
ubuntupython-aptMatch1.1.0beta1ubuntu0.16.04.5
AND
Node
OROR
ubuntupython-aptMatch1.4.0beta3build2
OR
ubuntupython-aptMatch1.4.0beta3ubuntu1
OROR
ubuntupython-aptMatch1.6.0rc1
OR
ubuntupython-aptMatch1.6.0rc2ubuntu1
OR
ubuntupython-aptMatch1.6.0rc2ubuntu2
OR
ubuntupython-aptMatch1.6.0rc3
OROROROR
ubuntupython-aptMatch1.6.3ubuntu1
OROR
AND
Node
OR
ubuntupython-aptMatch1.9.0alpha0~ubuntu1
OR
ubuntupython-aptMatch1.9.0alpha0~ubuntu2
OR
ubuntupython-aptMatch1.9.0ubuntu1
AND
Node
OROR
ubuntupython-aptMatch1.8.0alpha0~ubuntu1
OR
ubuntupython-aptMatch1.8.0alpha0~ubuntu2
OROROROR
AND
[
  {
    "product": "Python-apt",
    "vendor": "Canonical",
    "versions": [
      {
        "lessThan": "0.8.3ubuntu7.5",
        "status": "affected",
        "version": "0.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "0.9.3.5ubuntu3+esm2",
        "status": "affected",
        "version": "0.9.3.5",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.0~beta1ubuntu0.16.04.7",
        "status": "affected",
        "version": "1.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.6.5ubuntu0.1",
        "status": "affected",
        "version": "1.6.5",
        "versionType": "custom"
      },
      {
        "lessThan": "1.9.0ubuntu1.2",
        "status": "affected",
        "version": "1.9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.9.5",
        "status": "affected",
        "version": "1.9.5",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:29Current
4.6Medium risk
Vulners AI Score4.6
CVSS 22.6
CVSS 3.14.7
EPSS0.00174
96