The vulnerability of the ar/tar component of the package installation, update, and removal process for software packages in the apt system lies in the lack of a mechanism to verify input data. This allows attackers to trigger service failures.

The vulnerability of the ar/tar component in the package installation, update, and removal process of the apt package manager is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker who operates remotely to cause service failures...

UBUNTU-CVE-2020-3810

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files...

PT-2020-3733

Name of the Vulnerable Software and Affected Versions: APT versions prior to 2.1.2 Description: The issue is related to missing input validation in the ar/tar implementations, which could result in denial of service when processing specially crafted deb files. This could allow a remote attacker t...