Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2020-3810

Published: 15/05/2020 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 384
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Debian

Vulnerability Summary

It exists that APT incorrectly handled certain filenames during package installation. If an attacker could provide a specially crafted package to be installed by the system administrator, this could cause APT to crash.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

debian debian linux 9.0

debian debian linux 10.0

debian apt

fedoraproject fedora 32

canonical ubuntu linux 18.04

canonical ubuntu linux 14.04

canonical ubuntu linux 19.10

canonical ubuntu linux 20.04

canonical ubuntu linux 16.04

canonical ubuntu linux 12.04

Vendor Advisories

Ubuntu Security Notice: apt vulnerability
APT could be made to crash if it opened a specially crafted file ...
Ubuntu Security Notice: apt vulnerability
APT could be made to crash if it opened a specially crafted file ...
Debian Security Advisories: DSA-4685-1 apt -- security update
Shuaibing Lu discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could result in denial of service when processing specially crafted deb files For the oldstable distribution (stretch), this problem has been fixed in version 1410 For the stable distribution (buster), this problem has bee ...

References

CWE-20CWE-125https://salsa.debian.org/apt-team/apt/-/commit/dceb1e49e4b8e4dadaf056be34088b415939cda6https://github.com/Debian/apt/issues/111https://bugs.launchpad.net/bugs/1878177https://lists.debian.org/debian-security-announce/2020/msg00089.htmlhttps://tracker.debian.org/news/1144109/accepted-apt-212-source-into-unstable/https://usn.ubuntu.com/4359-1/https://usn.ubuntu.com/4359-2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4PEH357MZM2SUGKETMEHMSGQS652QHH/https://nvd.nist.govhttps://usn.ubuntu.com/4359-1/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook