PT-2013-2843

CVE-2013-1051

·

تاريخ النشر

2013-03-21

·

تاريخ التحديث

2020-01-08

الوصف من

CVSS 2.0
4.3
متوسطة
المقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions apt versions 0.8.16 through 0.9.7
Description The issue is related to the handling of InRelease files, which can be exploited by man-in-the-middle attackers to modify packages before installation. This is possibly related to integrity checking and the use of third-party repositories.
Recommendations For apt versions 0.8.16 through 0.9.7, consider restricting the use of third-party repositories to minimize the risk of exploitation. As a temporary workaround, ensure that package integrity is thoroughly checked before installation. At the moment, there is no information about a newer version that contains a fix for this issue.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾