Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-6273
HistorySep 23, 2014 - 12:00 a.m.

CVE-2014-6273

2014-09-2300:00:00
ubuntu.com
ubuntu.com
12

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.4%

JSON

Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and
earlier allows man-in-the-middle attackers to cause a denial of service
(crash) or possibly execute arbitrary code via a crafted URL.

Notes

Author Note
mdeslaur should only be a denial of service because of hardening
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchapt< 0.7.25.3ubuntu9.17.1UNKNOWN
ubuntu12.04noarchapt< 0.8.16~exp12ubuntu10.20.1UNKNOWN
ubuntu14.04noarchapt< 1.0.1ubuntu2.4.1UNKNOWN

Related

debian 4
openvas 5
prion 1
osv 1
mageia 1
cve 1
ubuntu 1
debiancve 1
nvd 1
nessus 2
securityvulns 2
cvelist 1
fortinet 1
debian
debian
[SECURITY] [DLA 58-2] apt regression fix
2014-10-14 09:47:58
[SECURITY] [DLA 58-1] apt security update
2014-09-23 17:05:35
[SECURITY] [DSA 3031-1] apt security update
2014-09-23 16:18:11
openvas
openvas
Ubuntu: Security Advisory (USN-2353-1)
2014-09-24 00:00:00
Debian: Security Advisory (DSA-3031-1)
2014-09-22 00:00:00
Debian Security Advisory DSA 3031-1 (apt - security update)
2014-09-23 00:00:00
prion
prion
Buffer overflow
2014-09-30 14:55:00
osv
osv
apt - security update
2014-09-23 00:00:00
mageia
mageia
Updated apt packages fix security vulnerability
2014-11-12 12:56:47
cve
cve
CVE-2014-6273
2014-09-30 14:55:11
ubuntu
ubuntu
APT vulnerability
2014-09-23 00:00:00
debiancve
debiancve
CVE-2014-6273
2014-09-30 14:55:11
nvd
nvd
CVE-2014-6273
2014-09-30 14:55:11
nessus
nessus
Debian DSA-3031-1 : apt - security update
2014-09-25 00:00:00
Ubuntu 14.04 LTS : APT vulnerability (USN-2353-1)
2014-09-24 00:00:00
securityvulns
securityvulns
[USN-2353-1] APT vulnerability
2014-09-25 00:00:00
apt multiple security vulnerabilities
2014-09-25 00:00:00
cvelist
cvelist
CVE-2014-6273
2014-09-30 14:00:00
fortinet
fortinet
Remote Exploit Vulnerability in Bash - (Shellshock)
2014-09-25 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.4%

JSON
Related for UB:CVE-2014-6273
debian4openvas5prion1osv1mageia1cve1ubuntu1debiancve1nvd1nessus2securityvulns2cvelist1fortinet1