CVE-2014-0488

Опубликовано: 03 нояб. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data.

Ссылки

http://secunia.com/advisories/61275
http://secunia.com/advisories/61286
http://ubuntu.com/usn/usn-2348-1
Patch
Vendor Advisory
http://www.debian.org/security/2014/dsa-3025
Vendor Advisory
http://secunia.com/advisories/61275
http://secunia.com/advisories/61286
http://ubuntu.com/usn/usn-2348-1
Patch
Vendor Advisory
http://www.debian.org/security/2014/dsa-3025
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:debian:advanced_package_tool:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:debian:advanced_package_tool:1.0.7:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00202

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-0488

ubuntu

больше 11 лет назад

CVE-2014-0488

debian

больше 11 лет назад

APT before 1.0.9 does not "invalidate repository data" when moving fro ...

GHSA-877r-5chx-6473

github

больше 3 лет назад

EPSS

Процентиль: 42%

0.00202

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20