Lucene search
UbuntuUSN-3863-1HistoryJan 22, 2019 - 12:00 a.m.
APT vulnerability
2019-01-2200:00:00
ubuntu.com
406
Releases
- Ubuntu 18.10
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- apt - Advanced front-end for dpkg
Details
Max Justicz discovered that APT incorrectly handled certain parameters
during redirects. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could potentially be used to install
altered packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.10 | noarch | apt | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | apt-dbgsym | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | apt-doc | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | apt-transport-https | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | apt-utils | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | apt-utils-dbgsym | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | libapt-inst2.0 | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | libapt-inst2.0-dbgsym | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | libapt-pkg-dev | < 1.7.0ubuntu0.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | libapt-pkg-doc | < 1.7.0ubuntu0.1 | UNKNOWN |
References
Related
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : APT vulnerability (USN-3863-1)
2019-01-23 00:00:00
Debian DLA-1637-1 : apt security update (amended)
2019-01-23 00:00:00
Debian DSA-4371-1 : apt - security update
2019-01-23 00:00:00
debian
debian
[SECURITY] [DLA 1637-1] apt security update (amended)
2019-01-22 14:55:53
[SECURITY] [DSA 4371-1] apt security update
2019-01-22 12:17:26
[SECURITY] [DLA 1637-1] apt security update
2019-01-22 14:32:01
prion
prion
Design/Logic Flaw
2019-01-28 21:29:00
Command injection
2020-06-03 23:15:00
cve
cve
CVE-2019-3462
2019-01-28 21:29:00
CVE-2020-11091
2020-06-03 23:15:00
openvas
openvas
Debian: Security Advisory (DLA-1637-1)
2019-01-21 00:00:00
Ubuntu: Security Advisory (USN-3863-1)
2019-01-23 00:00:00
Debian: Security Advisory (DSA-4371-1)
2019-01-21 00:00:00
ubuntu
ubuntu
APT vulnerability
2019-01-22 00:00:00
redhatcve
redhatcve
CVE-2019-3462
2022-05-20 22:48:56
osv
osv
apt - security update
2019-01-22 00:00:00
apt - security update
2019-01-22 00:00:00
CVE-2020-11091
2020-06-03 23:15:11
ubuntucve
ubuntucve
CVE-2019-3462
2019-01-22 00:00:00
CVE-2020-11091
2020-06-03 00:00:00
thn
thn
Critical RCE Flaw in Linux APT Allows Remote Attackers to Hack Systems
2019-01-22 16:20:00
cloudfoundry
cloudfoundry
USN-3863-1: APT vulnerability | Cloud Foundry
2019-01-24 00:00:00
debiancve
debiancve
CVE-2019-3462
2019-01-28 21:29:00
checkpoint_advisories
checkpoint_advisories
Advanced Package Tool Remote Code Execution (CVE-2019-3462)
2019-01-28 00:00:00
f5
f5
K22356857 : APT remote code injection vulnerability CVE-2019-3462
2019-03-06 00:00:00
cvelist
cvelist
CVE-2019-3462
2019-01-22 00:00:00
github
github
hackerone
hackerone
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v
2019-04-18 16:40:01
kitploit
kitploit