U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2019-15795

Change History

Initial Analysis by NIST 4/08/2020 2:23:55 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:debian:python-apt:1.8.4:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.4.0:beta3build2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.4.0:beta3ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.0:rc1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.0:rc2ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.0:rc2ubuntu2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.0:rc3:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.2:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.3:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.3:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.6.4:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.4:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ubuntu:python-apt:0.8.0:ubuntu9:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.1:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu3:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu4:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu5:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu6:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.3:ubuntu7.3:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ubuntu:python-apt:0.8.9.1:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.8.9.1:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.0:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.1:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.1:build1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.1:build2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.1:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.1:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.2:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.2:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.2:ubuntu2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.3:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.3:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.4:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.4:build1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.5:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:0.9.3.5:ubuntu3:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ubuntu:python-apt:1.0.1:build1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.0.1:ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.0.1:ubuntu2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1build1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.3:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.4:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.1.0:beta1ubuntu0.16.04.5:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ubuntu:python-apt:1.7.0:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.0:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.0:alpha0\~ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.0:alpha0\~ubuntu2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.1:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.2:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.3:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.8.4:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ubuntu:python-apt:1.8.4:*:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.9.0:alpha0\~ubuntu1:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.9.0:alpha0\~ubuntu2:*:*:*:*:*:*
          *cpe:2.3:a:ubuntu:python-apt:1.9.0:ubuntu1:*:*:*:*:*:*
     OR
          cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
NIST (AV:N/AC:H/Au:N/C:N/I:P/A:N)
Added CVSS V2 Metadata

								
							
							
						
Victim must voluntarily interact with attack mechanism
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Added CWE

								
							
							
						
NIST CWE-327
Changed Reference Type
https://usn.ubuntu.com/4247-1/ No Types Assigned
https://usn.ubuntu.com/4247-1/ Patch, Vendor Advisory
Changed Reference Type
https://usn.ubuntu.com/4247-3/ No Types Assigned
https://usn.ubuntu.com/4247-3/ Patch, Vendor Advisory