advanced_package_tool vulnerabilities and exploits

(subscribe to this query)

The apt-get download command in APT prior to 1.0.9 does not properly validate signatures for packages, which allows remote malicious users to execute arbitrary code via a crafted package.

Debian Advanced Package Tool Debian Advanced Package Tool 1.0.6 Debian Advanced Package Tool 1.0.5 Debian Advanced Package Tool 1.0.4 Debian Advanced Package Tool 1.0.3 Debian Advanced Package Tool 1.0.7

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions before 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions before 1.6.5ubuntu0.4; 2.0....

Debian Advanced Package Tool

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions before 1.2.32ubuntu0.2; 1.6...

Debian Advanced Package Tool Netapp Solidfire Baseboard Management Controller Firmware -

1 Github repository

The apt package in Debian jessie prior to 1.0.9.8.4, in Debian unstable prior to 1.4~beta2, in Ubuntu 14.04 LTS prior to 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS prior to 1.2.15ubuntu0.2, and in Ubuntu 16.10 prior to 1.3.2ubuntu0.1 allows man-in-the-middle malicious users to bypass a...

Debian Advanced Package Tool Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 16.10

1 EDB exploit5 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook