Lucene search

K
cve[email protected]CVE-2014-6273
HistorySep 30, 2014 - 2:55 p.m.

CVE-2014-6273

2014-09-3014:55:11
CWE-119
web.nvd.nist.gov
39
cve-2014-6273
buffer overflow
http transport code
apt-get
apt 1.0.1
denial of service
arbitrary code
crafted url
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.4%

Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the-middle attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted URL.

Affected configurations

NVD
Node
debianadvanced_package_toolRange1.0.1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.4%