psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

🗓️ 30 Jul 2021 07:00:00Reported by MicrosoftType

psutil through 5.6.5 has a double free due to refcount mishandling when converting system data to Python objects.

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in psutil affects IBM Spectrum Protect Plus backup and restore of Db2 and MongoDB databases (CVE-2019-18874)	9 Feb 202109:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability affects IBM Cloud Object Storage SDK Python (January 2020 Bulletin)	17 Jan 202016:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in psutil, python, and Golang affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	9 Feb 202109:54	–	ibm
FreeBSD	py-psutil -- double free vulnerability	12 Nov 201900:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 9 package python-module-psutil version 5.7.0-alt1	17 Apr 202000:00	–	altlinux
Tenable Nessus	Alibaba Cloud Linux 3 : 0262: python38:3.8 and python38-devel:3.8 (ALINUX3-SA-2024:0262)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : python-psutil (ALSA-2021:4324)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2021:4162)	11 Nov 202100:00	–	nessus
Tenable Nessus	CentOS 8 : python-psutil (CESA-2021:4324)	11 Nov 202100:00	–	nessus