Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w287-vj32-44rv

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration, which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vectors.

unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration, which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vectors.

EPSS

Процентиль: 23%
0.00076
Низкий

Дефекты

CWE-287

Связанные уязвимости

ubuntu
больше 10 лет назад

unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration, which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vectors.

nvd
больше 10 лет назад

unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration, which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vectors.

debian
больше 10 лет назад

unattended-upgrades before 0.86.1 does not properly authenticate packa ...

fstec
больше 10 лет назад

Уязвимость операционной системы Ubuntu, позволяющая нарушителю загрузить и выполнить произвольные установочные пакеты

EPSS

Процентиль: 23%
0.00076
Низкий

Дефекты

CWE-287