Lucene search
+L

2435 matches found

NVD
NVD
•added 2020/01/23 3:15 p.m.•35 views

CVE-2019-18899

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

6.2CVSS6.2AI score0.00264EPSS
SaveExploits0References3
OSV
OSV
•added 2020/01/23 3:15 p.m.•22 views

CVE-2019-18899

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

5.5CVSS6.1AI score0.00264EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2020/01/23 3:15 p.m.•28 views

CVE-2019-18899

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

6.2CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Prion
Prion
•added 2020/01/23 3:15 p.m.•23 views

Design/Logic Flaw

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

2.1CVSS5.3AI score0.00264EPSS
SaveExploits0References3Affected Software2
Ubuntu
Ubuntu
•added 2020/01/23 3:11 p.m.•95 views

USN-4247-3: python-apt vulnerabilities

USN-4247-1 fixed several vulnerabilities in python-apt. This update provides the corresponding updates for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that python-apt would still use MD5 hashes to validate certain downloaded packages. If a remote attacker...

4.7CVSS5.1AI score0.00509EPSS
SaveExploits0
OSV
OSV
•added 2020/01/23 3:11 p.m.•15 views

USN-4247-3 python-apt vulnerabilities

USN-4247-1 fixed several vulnerabilities in python-apt. This update provides the corresponding updates for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that python-apt would still use MD5 hashes to validate certain downloaded packages. If a remote attacker...

4.7CVSS5.8AI score0.00509EPSS
SaveExploits0References3
CVE
CVE
•added 2020/01/23 3:00 p.m.•173 views

CVE-2019-18899

The CVE-2019-18899 issue affects openSUSE Leap 15.1 where apt-cacher-ng operations run in the user-owned directory /run/apt-cacher-ng with root privileges, enabling local attackers to influence operation outcomes. Publicly referenced advisories confirm this vulnerability in apt-cacher-ng versions...

6.2CVSS6AI score0.00264EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2020/01/23 3:00 p.m.•61 views

CVE-2019-18899

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

6.2CVSS5.7AI score0.00264EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/01/23 3:00 p.m.•48 views

CVE-2019-18899 apt-cacher-ng insecure use of /run/apt-cacher-ng

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

6.2CVSS5.8AI score0.00264EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•63 views

Ubuntu: Security Advisory (USN-4247-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS4.8AI score0.00509EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/01/23 12:00 a.m.•14 views

PT-2020-10008 · Opensuse +1 · Opensuse Leap +1

Name of the Vulnerable Software and Affected Versions: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1 Description: The issue allows local attackers to influence the outcome of operations run by the apt-cacher-ng package in the user-owned directory /run/apt-cacher-ng with root...

6.2CVSS5.4AI score0.00469EPSS
SaveExploits1References20
OSV
OSV
•added 2020/01/23 12:00 a.m.•27 views

DSA-4609-1 python-apt - security update

Bulletin has no description...

4.7CVSS4.5AI score0.00509EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/01/23 12:00 a.m.•34 views

Ubuntu 16.04 LTS / 18.04 LTS : python-apt regression (USN-4247-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4247-2 advisory. USN-4247-1 fixed vulnerabilities in python-apt. The updated packages caused a regression when attempting to upgrade to a new Ubuntu release. This upda...

5.6AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/23 12:00 a.m.•5 views

CVE-2019-18899: Improper Privilege Management

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

6.2CVSS6AI score0.00264EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/01/23 12:00 a.m.•36 views

Ubuntu 16.04 LTS / 18.04 LTS : python-apt vulnerabilities (USN-4247-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4247-1 advisory. It was discovered that python-apt would still use MD5 hashes to validate certain downloaded packages. If a remote attacker were able to perfo...

4.7CVSS5.2AI score0.00509EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•50 views

Ubuntu: Security Advisory (USN-4247-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS4.8AI score0.00509EPSS
SaveExploits0References3
OSV
OSV
•added 2020/01/23 12:00 a.m.•35 views

DLA-2074-1 python-apt - security update

Bulletin has no description...

4.7CVSS4.5AI score0.00509EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2020/01/22 11:11 p.m.•62 views

USN-4247-2: python-apt regression

USN-4247-1 fixed vulnerabilities in python-apt. The updated packages caused a regression when attempting to upgrade to a new Ubuntu release. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that python-apt would still use MD5 hashes t...

5.2AI score0.00509EPSS
SaveExploits0References1
OSV
OSV
•added 2020/01/22 11:11 p.m.•15 views

USN-4247-2 python-apt regression

USN-4247-1 fixed vulnerabilities in python-apt. The updated packages caused a regression when attempting to upgrade to a new Ubuntu release. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that python-apt would still use MD5 hashes t...

5.8AI score
SaveExploits0References2
Ubuntu
Ubuntu
•added 2020/01/22 6:15 p.m.•74 views

USN-4247-1: python-apt vulnerabilities

It was discovered that python-apt would still use MD5 hashes to validate certain downloaded packages. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages. CVE-2019-15795 It was discovered that python-apt could...

4.7CVSS5.1AI score0.00509EPSS
SaveExploits0
Rows per page
Query Builder