apt-cacher vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

apt-cacher prior to 1.7.15 and apt-cacher-ng prior to 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.

Apt-cacher Project Apt-cacher Apt-cacher-ng Project Apt-cacher-ng

NA

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote malicious users to execute arbitrary commands on the caching server.

Debian Apt-cacher 0.9.9 Debian Apt-cacher 0.9.4

5.5

CVSSv3

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local malicious users to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions before...

Apt-cacher-ng Project Apt-cacher-ng Opensuse Backports Sle-15

NA

Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.

Debian Apt-cacher 0.7.26

5.5

CVSSv3

apt-cacher-ng up to and including 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/...

Apt-cacher-ng Project Apt-cacher-ng Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Backports Sle-15 Opensuse Leap 15.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook