Lucene search
DebianCVELIST:CVE-2019-3462HistoryJan 22, 2019 - 12:00 a.m.
CVE-2019-3462
2019-01-2200:00:00
debian
www.cve.org
2
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.
CNA Affected
[
{
"product": "apt as used in Debian Stretch and Ubuntu",
"vendor": "Debian GNU/Linux",
"versions": [
{
"status": "affected",
"version": "1.4.8 and earlier"
}
]
}
]References
www.securityfocus.com/bid/106690
lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
lists.debian.org/debian-lts-announce/2019/01/msg00013.html
lists.debian.org/debian-lts-announce/2019/01/msg00014.html
security.netapp.com/advisory/ntap-20190125-0002/
usn.ubuntu.com/3863-1/
usn.ubuntu.com/3863-2/
www.debian.org/security/2019/dsa-4371
Related
debian
debian
[SECURITY] [DSA 4371-1] apt security update
2019-01-22 12:17:26
[SECURITY] [DLA 1637-1] apt security update (amended)
2019-01-22 14:55:32
[SECURITY] [DLA 1637-1] apt security update
2019-01-22 14:31:40
osv
osv
apt - security update
2019-01-22 00:00:00
apt - security update
2019-01-22 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4371-1)
2019-01-21 00:00:00
Ubuntu: Security Advisory (USN-3863-1)
2019-01-23 00:00:00
Debian: Security Advisory (DLA-1637-1)
2019-01-21 00:00:00
ubuntucve
ubuntucve
CVE-2019-3462
2019-01-22 00:00:00
CVE-2020-11091
2020-06-03 00:00:00
nvd
nvd
CVE-2019-3462
2019-01-28 21:29:00
CVE-2020-11091
2020-06-03 23:15:11
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : APT vulnerability (USN-3863-1)
2019-01-23 00:00:00
Debian DLA-1637-1 : apt security update (amended)
2019-01-23 00:00:00
Debian DSA-4371-1 : apt - security update
2019-01-23 00:00:00
prion
prion
Design/Logic Flaw
2019-01-28 21:29:00
Command injection
2020-06-03 23:15:00
thn
thn
Critical RCE Flaw in Linux APT Allows Remote Attackers to Hack Systems
2019-01-22 16:20:00
cloudfoundry
cloudfoundry
USN-3863-1: APT vulnerability | Cloud Foundry
2019-01-24 00:00:00
debiancve
debiancve
CVE-2019-3462
2019-01-28 21:29:00
ubuntu
ubuntu
APT vulnerability
2019-01-22 00:00:00
APT vulnerability
2019-01-22 00:00:00
redhatcve
redhatcve
CVE-2019-3462
2022-05-20 22:48:56
cve
cve
CVE-2019-3462
2019-01-28 21:29:00
CVE-2020-11091
2020-06-03 23:15:11
f5
f5
K22356857 : APT remote code injection vulnerability CVE-2019-3462
2019-03-06 00:00:00
checkpoint_advisories
checkpoint_advisories
Advanced Package Tool Remote Code Execution (CVE-2019-3462)
2019-01-28 00:00:00
hackerone
hackerone
github
github
cvelist
cvelist
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v
2019-04-18 16:40:01
kitploit
kitploit