Read the docs
TI-2019-11867 Aliases CVE-2019-15796GHSA-pj65-3pf6-c5q4

python-apt downloads from untrusted sources

Priority LOW 22CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-287.

Summary

Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn't be allowed and has been fixed in verisions 1.9.5, 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.

Why it matters now

EPSS 0.00509 43rd percentileScored 2026-11-07
Fix Fixed Python-apt (Canonical): 0.8.3ubuntu7.5, 0.9.3.5ubuntu3+esm2, 1.1.0~beta1ubuntu0.16.04.7 +3python-apt (PyPI): 0.8.3ubuntu7.5, 0.9.3.5ubuntu3, 1.6.5ubuntu0.1 +2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CanonicalPython-apt0.8.3 to before 0.8.3ubuntu7.5; 0.9.3.5 to before 0.9.3.5ubuntu3+esm2; 1.1.0 to before 1.1.0~beta1ubuntu0.16.04.7; 1.6.5 to before 1.6.5ubuntu0.1; 1.9.0 to before 1.9.0ubuntu1.2; 1.9.5 to before 1.9.50.8.3ubuntu7.5, 0.9.3.5ubuntu3+esm2, 1.1.0~beta1ubuntu0.16.04.7, 1.6.5ubuntu0.1, 1.9.0ubuntu1.2, 1.9.5Patch availableCNA
—python-apt (PyPI)before 0.8.3ubuntu7.50.8.3ubuntu7.5Patch availableGHSA-pj65-3pf6-c5q4
—python-apt (PyPI)0.9.0 to before 0.9.3.5ubuntu30.9.3.5ubuntu3Patch availableGHSA-pj65-3pf6-c5q4
—python-apt (PyPI)1.2.0 to before 1.6.5ubuntu0.11.6.5ubuntu0.1Patch availableGHSA-pj65-3pf6-c5q4
—python-apt (PyPI)1.7.0 to before 1.9.0ubuntu1.21.9.0ubuntu1.2Patch availableGHSA-pj65-3pf6-c5q4
—python-apt (PyPI)1.9.1 to before 1.9.51.9.5Patch availableGHSA-pj65-3pf6-c5q4
  • Python-apt VendorCanonical Affected 0.8.3 to before 0.8.3ubuntu7.5; 0.9.3.5 to before 0.9.3.5ubuntu3+esm2; 1.1.0 to before 1.1.0~beta1ubuntu0.16.04.7; 1.6.5 to before 1.6.5ubuntu0.1; 1.9.0 to before 1.9.0ubuntu1.2; 1.9.5 to before 1.9.5 Fixed in 0.8.3ubuntu7.5, 0.9.3.5ubuntu3+esm2, 1.1.0~beta1ubuntu0.16.04.7, 1.6.5ubuntu0.1, 1.9.0ubuntu1.2, 1.9.5 Patch available CNA
  • python-apt (PyPI) Vendor— Affected before 0.8.3ubuntu7.5 Fixed in 0.8.3ubuntu7.5 Patch available GHSA-pj65-3pf6-c5q4
  • python-apt (PyPI) Vendor— Affected 0.9.0 to before 0.9.3.5ubuntu3 Fixed in 0.9.3.5ubuntu3 Patch available GHSA-pj65-3pf6-c5q4
  • python-apt (PyPI) Vendor— Affected 1.2.0 to before 1.6.5ubuntu0.1 Fixed in 1.6.5ubuntu0.1 Patch available GHSA-pj65-3pf6-c5q4
  • python-apt (PyPI) Vendor— Affected 1.7.0 to before 1.9.0ubuntu1.2 Fixed in 1.9.0ubuntu1.2 Patch available GHSA-pj65-3pf6-c5q4
  • python-apt (PyPI) Vendor— Affected 1.9.1 to before 1.9.5 Fixed in 1.9.5 Patch available GHSA-pj65-3pf6-c5q4

CPE configurations NVD · 72

CPEVersionsRoleVendor
cpe:2.3:a:ubuntu:python-apt:0.8.0:ubuntu9:*:*:*:*:*:*0.8.0 ubuntu9VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.1:ubuntu1:*:*:*:*:*:*0.8.1 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu1:*:*:*:*:*:*0.8.3 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu2:*:*:*:*:*:*0.8.3 ubuntu2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu3:*:*:*:*:*:*0.8.3 ubuntu3VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu4:*:*:*:*:*:*0.8.3 ubuntu4VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu5:*:*:*:*:*:*0.8.3 ubuntu5VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu6:*:*:*:*:*:*0.8.3 ubuntu6VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7:*:*:*:*:*:*0.8.3 ubuntu7VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.1:*:*:*:*:*:*0.8.3 ubuntu7.1VulnerableUbuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.0:ubuntu9:*:*:*:*:*:* Versions 0.8.0 ubuntu9 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.1:ubuntu1:*:*:*:*:*:* Versions 0.8.1 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu1:*:*:*:*:*:* Versions 0.8.3 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu2:*:*:*:*:*:* Versions 0.8.3 ubuntu2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu3:*:*:*:*:*:* Versions 0.8.3 ubuntu3 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu4:*:*:*:*:*:* Versions 0.8.3 ubuntu4 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu5:*:*:*:*:*:* Versions 0.8.3 ubuntu5 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu6:*:*:*:*:*:* Versions 0.8.3 ubuntu6 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7:*:*:*:*:*:* Versions 0.8.3 ubuntu7 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.1:*:*:*:*:*:* Versions 0.8.3 ubuntu7.1 Vulnerable ·Ubuntu
Show 62 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.2:*:*:*:*:*:*0.8.3 ubuntu7.2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.3:*:*:*:*:*:*0.8.3 ubuntu7.3VulnerableUbuntu
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*12.04Running onCanonical
cpe:2.3:a:ubuntu:python-apt:0.8.9.1:*:*:*:*:*:*:*0.8.9.1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.8.9.1:ubuntu1:*:*:*:*:*:*0.8.9.1 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.0:*:*:*:*:*:*:*0.9.0VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.1:*:*:*:*:*:*:*0.9.1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.1:build1:*:*:*:*:*:*0.9.1 build1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.1:build2:*:*:*:*:*:*0.9.1 build2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.1:ubuntu1:*:*:*:*:*:*0.9.1 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.1:*:*:*:*:*:*:*0.9.3.1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.2:*:*:*:*:*:*:*0.9.3.2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.2:ubuntu1:*:*:*:*:*:*0.9.3.2 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.2:ubuntu2:*:*:*:*:*:*0.9.3.2 ubuntu2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.3:*:*:*:*:*:*:*0.9.3.3VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.3:ubuntu1:*:*:*:*:*:*0.9.3.3 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.4:*:*:*:*:*:*:*0.9.3.4VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.4:build1:*:*:*:*:*:*0.9.3.4 build1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.5:*:*:*:*:*:*:*0.9.3.5VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu1:*:*:*:*:*:*0.9.3.5 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu2:*:*:*:*:*:*0.9.3.5 ubuntu2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu3:*:*:*:*:*:*0.9.3.5 ubuntu3VulnerableUbuntu
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*14.04Running onCanonical
cpe:2.3:a:ubuntu:python-apt:1.0.1:build1:*:*:*:*:*:*1.0.1 build1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.0.1:ubuntu1:*:*:*:*:*:*1.0.1 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.0.1:ubuntu2:*:*:*:*:*:*1.0.1 ubuntu2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1:*:*:*:*:*:*1.1.0 beta1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1build1:*:*:*:*:*:*1.1.0 beta1build1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.1:*:*:*:*:*:*1.1.0 beta1ubuntu0.16.04.1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.2:*:*:*:*:*:*1.1.0 beta1ubuntu0.16.04.2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.3:*:*:*:*:*:*1.1.0 beta1ubuntu0.16.04.3VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.4:*:*:*:*:*:*1.1.0 beta1ubuntu0.16.04.4VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.5:*:*:*:*:*:*1.1.0 beta1ubuntu0.16.04.5VulnerableUbuntu
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04Running onCanonical
cpe:2.3:a:debian:python-apt:1.8.4:*:*:*:*:*:*:*1.8.4VulnerableDebian
cpe:2.3:a:ubuntu:python-apt:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.4.0:beta3build2:*:*:*:*:*:*1.4.0 beta3build2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.4.0:beta3ubuntu1:*:*:*:*:*:*1.4.0 beta3ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.0:rc1:*:*:*:*:*:*1.6.0 rc1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.0:rc2ubuntu1:*:*:*:*:*:*1.6.0 rc2ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.0:rc2ubuntu2:*:*:*:*:*:*1.6.0 rc2ubuntu2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.0:rc3:*:*:*:*:*:*1.6.0 rc3VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.3:ubuntu1:*:*:*:*:*:*1.6.3 ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.8.4:*:*:*:*:*:*:*1.8.4VulnerableUbuntu
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04Running onCanonical
cpe:2.3:a:ubuntu:python-apt:1.9.0:alpha0\~ubuntu1:*:*:*:*:*:*1.9.0 alpha0\~ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.9.0:alpha0\~ubuntu2:*:*:*:*:*:*1.9.0 alpha0\~ubuntu2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.9.0:ubuntu1:*:*:*:*:*:*1.9.0 ubuntu1VulnerableUbuntu
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*19.10Running onCanonical
cpe:2.3:a:ubuntu:python-apt:1.7.0:*:*:*:*:*:*:*1.7.0VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.8.0:*:*:*:*:*:*:*1.8.0VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.8.0:alpha0\~ubuntu1:*:*:*:*:*:*1.8.0 alpha0\~ubuntu1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.8.0:alpha0\~ubuntu2:*:*:*:*:*:*1.8.0 alpha0\~ubuntu2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.8.1:*:*:*:*:*:*:*1.8.1VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.8.2:*:*:*:*:*:*:*1.8.2VulnerableUbuntu
cpe:2.3:a:ubuntu:python-apt:1.8.3:*:*:*:*:*:*:*1.8.3VulnerableUbuntu
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*19.04Running onCanonical
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.2:*:*:*:*:*:* Versions 0.8.3 ubuntu7.2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.3:*:*:*:*:*:* Versions 0.8.3 ubuntu7.3 Vulnerable ·Ubuntu
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Running on ·Canonical
  • cpe:2.3:a:ubuntu:python-apt:0.8.9.1:*:*:*:*:*:*:* Versions 0.8.9.1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.8.9.1:ubuntu1:*:*:*:*:*:* Versions 0.8.9.1 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.0:*:*:*:*:*:*:* Versions 0.9.0 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.1:*:*:*:*:*:*:* Versions 0.9.1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.1:build1:*:*:*:*:*:* Versions 0.9.1 build1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.1:build2:*:*:*:*:*:* Versions 0.9.1 build2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.1:ubuntu1:*:*:*:*:*:* Versions 0.9.1 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.1:*:*:*:*:*:*:* Versions 0.9.3.1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.2:*:*:*:*:*:*:* Versions 0.9.3.2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.2:ubuntu1:*:*:*:*:*:* Versions 0.9.3.2 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.2:ubuntu2:*:*:*:*:*:* Versions 0.9.3.2 ubuntu2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.3:*:*:*:*:*:*:* Versions 0.9.3.3 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.3:ubuntu1:*:*:*:*:*:* Versions 0.9.3.3 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.4:*:*:*:*:*:*:* Versions 0.9.3.4 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.4:build1:*:*:*:*:*:* Versions 0.9.3.4 build1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.5:*:*:*:*:*:*:* Versions 0.9.3.5 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu1:*:*:*:*:*:* Versions 0.9.3.5 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu2:*:*:*:*:*:* Versions 0.9.3.5 ubuntu2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu3:*:*:*:*:*:* Versions 0.9.3.5 ubuntu3 Vulnerable ·Ubuntu
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Running on ·Canonical
  • cpe:2.3:a:ubuntu:python-apt:1.0.1:build1:*:*:*:*:*:* Versions 1.0.1 build1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.0.1:ubuntu1:*:*:*:*:*:* Versions 1.0.1 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.0.1:ubuntu2:*:*:*:*:*:* Versions 1.0.1 ubuntu2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1:*:*:*:*:*:* Versions 1.1.0 beta1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1build1:*:*:*:*:*:* Versions 1.1.0 beta1build1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.1:*:*:*:*:*:* Versions 1.1.0 beta1ubuntu0.16.04.1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.2:*:*:*:*:*:* Versions 1.1.0 beta1ubuntu0.16.04.2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.3:*:*:*:*:*:* Versions 1.1.0 beta1ubuntu0.16.04.3 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.4:*:*:*:*:*:* Versions 1.1.0 beta1ubuntu0.16.04.4 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.5:*:*:*:*:*:* Versions 1.1.0 beta1ubuntu0.16.04.5 Vulnerable ·Ubuntu
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Running on ·Canonical
  • cpe:2.3:a:debian:python-apt:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·Debian
  • cpe:2.3:a:ubuntu:python-apt:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.4.0:beta3build2:*:*:*:*:*:* Versions 1.4.0 beta3build2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.4.0:beta3ubuntu1:*:*:*:*:*:* Versions 1.4.0 beta3ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.0:rc1:*:*:*:*:*:* Versions 1.6.0 rc1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.0:rc2ubuntu1:*:*:*:*:*:* Versions 1.6.0 rc2ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.0:rc2ubuntu2:*:*:*:*:*:* Versions 1.6.0 rc2ubuntu2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.0:rc3:*:*:*:*:*:* Versions 1.6.0 rc3 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.3:ubuntu1:*:*:*:*:*:* Versions 1.6.3 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·Ubuntu
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Running on ·Canonical
  • cpe:2.3:a:ubuntu:python-apt:1.9.0:alpha0\~ubuntu1:*:*:*:*:*:* Versions 1.9.0 alpha0\~ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.9.0:alpha0\~ubuntu2:*:*:*:*:*:* Versions 1.9.0 alpha0\~ubuntu2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.9.0:ubuntu1:*:*:*:*:*:* Versions 1.9.0 ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* Versions 19.10 Running on ·Canonical
  • cpe:2.3:a:ubuntu:python-apt:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.8.0:alpha0\~ubuntu1:*:*:*:*:*:* Versions 1.8.0 alpha0\~ubuntu1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.8.0:alpha0\~ubuntu2:*:*:*:*:*:* Versions 1.8.0 alpha0\~ubuntu2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·Ubuntu
  • cpe:2.3:a:ubuntu:python-apt:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·Ubuntu
  • cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* Versions 19.04 Running on ·Canonical

Remediation

  • Fix · CNA Python-apt (Canonical) Fixed in 0.8.3ubuntu7.5, 0.9.3.5ubuntu3+esm2, 1.1.0~beta1ubuntu0.16.04.7, 1.6.5ubuntu0.1, 1.9.0ubuntu1.2, 1.9.5
  • Fix · GHSA-pj65-3pf6-c5q4 python-apt (PyPI) Fixed in 0.8.3ubuntu7.5 Advisory →
  • Fix · GHSA-pj65-3pf6-c5q4 python-apt (PyPI) Fixed in 0.9.3.5ubuntu3 Advisory →
  • Fix · GHSA-pj65-3pf6-c5q4 python-apt (PyPI) Fixed in 1.6.5ubuntu0.1 Advisory →
  • Fix · GHSA-pj65-3pf6-c5q4 python-apt (PyPI) Fixed in 1.9.0ubuntu1.2 Advisory →
  • Fix · GHSA-pj65-3pf6-c5q4 python-apt (PyPI) Fixed in 1.9.5 Advisory →

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Canonical Python-apt — usn.ubuntu.com/4247-1

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →
  • Advisory ·

    Canonical Python-apt — usn.ubuntu.com/4247-3

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-15796
  2. 2026-10-03 Alias added: GHSA-pj65-3pf6-c5q4

References

Patch 2

Advisory 1

Other 3

  • TI-2020-09349 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-05854 smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01431 Netlogon Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-12627 Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than… KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-07471 OS command injection in exim KEVCVSS 3.1CRITICAL 9.8
See all 4301 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences