漏洞信息详情
psutil 资源管理错误漏洞
漏洞简介
psutil是一款基于Python的进程和系统监视库。
psutil 5.65及之前版本中存在资源管理错误漏洞。远程攻击者可借助特制数据利用该漏洞导致应用程序崩溃(拒绝服务)。
漏洞公告
目前厂商暂未发布修复措施解决此安全问题,建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法:
https://github.com/giampaolo/psutil
参考网址
来源:MISC
链接:https://github.com/giampaolo/psutil/pull/1616
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2019/11/msg00018.html
来源:lists.debian.org
链接:https://lists.debian.org/debian-lts-announce/2019/11/msg00018.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193068-1.html
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4204-1/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158199/Red-Hat-Security-Advisory-2020-2635-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3614/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164869/Red-Hat-Security-Advisory-2021-4324-02.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3535/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158272/Red-Hat-Security-Advisory-2020-2593-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159553/Red-Hat-Security-Advisory-2020-4255-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4515/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/162293/Red-Hat-Security-Advisory-2021-1313-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4248/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159655/Red-Hat-Security-Advisory-2020-4299-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4367/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2267/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2173.2/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4473/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3820
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.1366
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-psutil-affects-ibm-spectrum-protect-plus-backup-and-restore-of-db2-and-mongodb-databases-cve-2019-18874/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-18874
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/python-psutil-use-after-free-30900
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/160274/Red-Hat-Security-Advisory-2020-5249-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/155496/Ubuntu-Security-Notice-USN-4204-1.html
受影响实体
暂无
补丁
暂无
还没有评论,来说两句吧...