CVE-2016-1252

Mô tả

Tham khảo

• packetstormsecurity.com/files/140145/apt-Repository-Signing-Bypass.html · Issue Tracking
• ubuntu.com/usn/USN-3156-1 · Third Party Advisory
• bugs.chromium.org/p/project-zero/issues/detail · Exploit
• bugs.launchpad.net/ubuntu/+source/apt/+bug/1647467 · Exploit
• debian.org/security/2016/dsa-3733 · Issue Tracking
• exploit-db.com/exploits/40916 · Exploit

Lỗ hổng khác của advanced package tool

• CVE-2020-27351THẤP 2.8Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-17…
• CVE-2020-27350TRUNG BÌNH 5.7APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extr…
• CVE-2019-3462CAO 8.1Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a…
• CVE-2018-0501TRUNG BÌNH 5.9The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature…
• CVE-2014-0490CAO 7.5The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execut…