PYSEC-2019-41

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/psutil/PYSEC-2019-41.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2019-41
Aliases
Published
2019-11-12T02:15:00Z
Modified
2023-11-08T04:01:26.639734Z
Summary
[none]
Details

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

References

Affected packages

PyPI / psutil

Package

Name
psutil
View open source insights on deps.dev
Purl
pkg:pypi/psutil

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.6.6

Affected versions

0.*
0.1.0
0.1.1
0.1.2
0.1.3
0.2.0
0.2.1
0.3.0
0.4.0
0.4.1
0.5.0
0.5.1
0.6.0
0.6.1
0.7.0
0.7.1
1.*
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
1.2.1
2.*
2.0.0
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
3.*
3.0.0
3.0.1
3.1.0
3.1.1
3.2.0
3.2.1
3.2.2
3.3.0
3.4.0
3.4.1
3.4.2
4.*
4.0.0
4.1.0
4.2.0
4.3.0
4.3.1
4.4.0
4.4.1
4.4.2
5.*
5.0.0
5.0.1
5.1.0
5.1.1
5.1.2
5.1.3
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
5.6.0
5.6.1
5.6.2
5.6.3
5.6.4
5.6.5

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/psutil/PYSEC-2019-41.yaml"