Lucene search
UbuntuUSN-2353-1HistorySep 23, 2014 - 12:00 a.m.
APT vulnerability
2014-09-2300:00:00
ubuntu.com
22
Releases
- Ubuntu 14.04 ESM
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- apt - Advanced front-end for dpkg
Details
It was discovered that APT incorrectly handled certain http URLs. If a
remote attacker were able to perform a machine-in-the-middle attack, this flaw
could be exploited to cause APT to crash, resulting in a denial of service,
or possibly execute arbitrary code. The default compiler options for
affected releases should reduce the vulnerability to a denial of service.
(CVE-2014-6273)
In addition, this update fixes regressions introduced by the USN-2348-1
security update: APT incorrectly handled file:/// sources on a different
partition, incorrectly handled Dir::state::lists set to a relative path,
and incorrectly handled cdrom: sources.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | apt | <Â 1.0.1ubuntu2.4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | apt-transport-https | <Â 1.0.1ubuntu2.4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | apt-utils | <Â 1.0.1ubuntu2.4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libapt-inst1.5 | <Â 1.0.1ubuntu2.4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libapt-pkg-dev | <Â 1.0.1ubuntu2.4.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libapt-pkg4.12 | <Â 1.0.1ubuntu2.4.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | apt | <Â 0.8.16~exp12ubuntu10.20.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | apt-transport-https | <Â 0.8.16~exp12ubuntu10.20.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | apt-utils | <Â 0.8.16~exp12ubuntu10.20.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libapt-inst1.4 | <Â 0.8.16~exp12ubuntu10.20.1 | UNKNOWN |
References
Related
osv
osv
apt - security update
2014-09-23 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3031-1)
2014-09-22 00:00:00
Ubuntu: Security Advisory (USN-2353-1)
2014-09-24 00:00:00
Mageia: Security Advisory (MGASA-2014-0442)
2022-01-28 00:00:00
prion
prion
Buffer overflow
2014-09-30 14:55:00
debian
debian
[SECURITY] [DLA 58-2] apt regression fix
2014-10-14 09:48:16
[SECURITY] [DSA 3031-1] apt security update
2014-09-23 16:18:33
[SECURITY] [DLA 58-1] apt security update
2014-09-23 17:05:57
nessus
nessus
Ubuntu 14.04 LTS : APT vulnerability (USN-2353-1)
2014-09-24 00:00:00
Debian DSA-3031-1 : apt - security update
2014-09-25 00:00:00
securityvulns
securityvulns
[USN-2353-1] APT vulnerability
2014-09-25 00:00:00
apt multiple security vulnerabilities
2014-09-25 00:00:00
cvelist
cvelist
CVE-2014-6273
2014-09-30 14:00:00
ubuntucve
ubuntucve
CVE-2014-6273
2014-09-23 00:00:00
cve
cve
CVE-2014-6273
2014-09-30 14:55:00
debiancve
debiancve
CVE-2014-6273
2014-09-30 14:55:00
mageia
mageia
Updated apt packages fix security vulnerability
2014-11-12 12:56:47
fortinet
fortinet
Remote Exploit Vulnerability in Bash - (Shellshock)
2014-09-25 00:00:00