Lucene search
GoogleOSV:GHSA-QFC5-MCWQ-26Q8HistoryMar 12, 2020 - 5:02 p.m.
Double Free in psutil
2020-03-1217:02:50
Google
osv.dev
22
0.003 Low
EPSS
Percentile
70.5%
psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.
References
github.com/giampaolo/psutil/blob/master/HISTORY.rst#566
github.com/giampaolo/psutil/commit/7d512c8e4442a896d56505be3e78f1156f443465
github.com/giampaolo/psutil/pull/1616
lists.debian.org/debian-lts-announce/2019/11/msg00018.html
lists.fedoraproject.org/archives/list/[email protected]/message/2P7QI7MOTZTFXQYU23CP3RAWXCERMOAS
lists.fedoraproject.org/archives/list/[email protected]/message/OLETTJYZL2SMBUI4Q2NGBMGPDPP54SRG
nvd.nist.gov/vuln/detail/CVE-2019-18874
usn.ubuntu.com/4204-1
Related
cbl_mariner
cbl_mariner
CVE-2019-18874 affecting package python-psutil 5.6.3-4
2021-08-11 06:39:26
osv
osv
CVE-2019-18874
2019-11-12 02:15:10
PYSEC-2019-41
2019-11-12 02:15:00
Moderate: python-psutil security update
2021-11-09 09:01:04
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0370)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-1998-1)
2019-11-26 00:00:00
Fedora: Security Advisory for python-psutil (FEDORA-2020-a06ebafad8)
2020-02-28 00:00:00
nvd
nvd
CVE-2019-18874
2019-11-12 02:15:10
fedora
fedora
[SECURITY] Fedora 31 Update: python-psutil-5.6.7-1.fc31
2020-03-11 22:46:54
[SECURITY] Fedora 30 Update: python-psutil-5.6.7-1.fc30
2020-02-25 14:39:38
redhatcve
redhatcve
CVE-2019-18874
2019-11-13 13:08:07
ubuntucve
ubuntucve
CVE-2019-18874
2019-11-12 00:00:00
ibm
ibm
redhat
redhat
alpinelinux
alpinelinux
CVE-2019-18874
2019-11-12 02:15:10
debiancve
debiancve
CVE-2019-18874
2019-11-12 02:15:10
freebsd
freebsd
py-psutil -- double free vulnerability
2019-11-12 00:00:00
cve
cve
CVE-2019-18874
2019-11-12 02:15:10
rocky
rocky
python-psutil security update
2021-11-09 09:01:04
python38:3.8 and python38-devel:3.8 security update
2021-11-09 12:47:54
cvelist
cvelist
CVE-2019-18874
2019-11-12 01:30:29
mageia
mageia
Updated python-psutil packages fix security vulnerability
2019-12-06 17:15:42
nessus
nessus
Debian DLA-1998-1 : python-psutil security update
2019-11-20 00:00:00
Rocky Linux 8 : python-psutil (RLSA-2021:4324)
2023-11-07 00:00:00
RHEL 8 : python-psutil (RHSA-2021:4324)
2021-11-11 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-11-13 03:53:48
prion
prion
Double free
2019-11-12 02:15:00
debian
debian
[SECURITY] [DLA 1998-1] python-psutil security update
2019-11-18 18:55:02
ubuntu
ubuntu
psutil vulnerability
2019-11-28 00:00:00
almalinux
almalinux
Moderate: python-psutil security update
2021-11-09 09:01:04
Moderate: python38:3.8 and python38-devel:3.8 security update
2021-11-09 12:47:54
github
github
Double Free in psutil
2020-03-12 17:02:50
oraclelinux
oraclelinux
python-psutil security update
2021-11-16 00:00:00
python38:3.8 and python38-devel:3.8 security update
2021-11-16 00:00:00
altlinux
altlinux