CVE-2020-3810

Mô tả

Tham khảo

• bugs.launchpad.net/bugs/1878177 · Issue Tracking
• Debian/apt · Exploit
• lists.debian.org/debian-security-announce/2020/msg00089.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4PEH357MZM2SUGKETMEHMSGQS652QHH
• salsa.debian.org/apt-team/apt/-/commit/dceb1e49e4b8e4dadaf056be34088b415939cda6 · Patch
• tracker.debian.org/news/1144109/accepted-apt-212-source-into-unstable · Release Notes
• usn.ubuntu.com/4359-1 · Third Party Advisory
• usn.ubuntu.com/4359-2 · Third Party Advisory

Lỗ hổng khác của apt

• CVE-2014-7206THẤP 3.6The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file.
• CVE-2013-1051TRUNG BÌNH 4.3apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify …
• CVE-2012-0961THẤP 2.1Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.…
• CVE-2009-1358NGHIÊM TRỌNG 10.0apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when …