Debian Advanced Package Tool vulnerabilities

• canonical python-apt, debian advanced package tool +1 more Various memory and file descriptor leaks in apt-python CVE-2020-27351 Fix available 2.0 LowDecember 9, 2020
• canonical apt, debian advanced package tool, netapp solidfire baseboard management controller firmware +2 more apt integer wraparound CVE-2020-27350 Fix available 5.7 MediumDecember 9, 2020
• apt, debian advanced package tool, linux +2 more It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the... CVE-2011-3374 3.7 LowNovember 25, 2019
• canonical ubuntu linux, debian advanced package tool, linux +3 more +5 more Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and... CVE-2019-3462 Public exploitFix available EPSS 14.6% 8.1 HighJanuary 22, 2019
• debian advanced package tool, canonical ubuntu linux +1 more The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x... CVE-2018-0501 Fix available 5.9 MediumAugust 20, 2018
• canonical ubuntu linux, debian advanced package tool +1 more The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu... CVE-2016-1252 Public exploitFix available 5.9 MediumDecember 13, 2016
• debian apt, advanced package tool +1 more The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a... CVE-2014-7206 Fix available 3.6 LowOctober 8, 2014
• debian advanced package tool Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the... CVE-2014-6273 Fix available 6.8 MediumSeptember 23, 2014
• debian advanced package tool The apt-get download command in APT before 1.0.9 does not properly validate signatures for... CVE-2014-0490 Fix available 7.5 HighSeptember 16, 2014
• debian advanced package tool APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums,... CVE-2014-0489 Fix available 7.5 HighSeptember 16, 2014
• debian advanced package tool APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to... CVE-2014-0488 Fix available 6.8 MediumSeptember 16, 2014
• debian advanced package tool APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using... CVE-2014-0487 Fix available 7.5 HighSeptember 16, 2014
• debian advanced package tool APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle... CVE-2014-0478 Fix available 4.0 MediumJune 12, 2014
• canonical ubuntu linux, debian advanced package tool +1 more methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails... CVE-2011-3634 Fix available 2.6 LowFebruary 28, 2014
• debian apt, canonical ubuntu linux, debian advanced package tool +2 more apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which... CVE-2013-1051 Fix available 4.3 MediumMarch 21, 2013
• debian apt, advanced package tool +1 more Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16... CVE-2012-0961 Fix available 2.1 LowDecember 26, 2012
• debian advanced package tool APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import... CVE-2012-3587 Fix available 2.6 LowJune 19, 2012
• debian advanced package tool APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import... CVE-2012-0954 Fix available 2.6 LowJune 19, 2012
• canonical ubuntu linux, debian advanced package tool +1 more APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the... CVE-2011-1829 Fix available 4.3 MediumJuly 27, 2011
• debian apt, advanced package tool +1 more apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes... CVE-2009-1358 Fix available 10.0 HighApril 6, 2009
• debian advanced package tool apt 0.7.20 does not check when the date command returns an "invalid date" error, which can... CVE-2009-1300 Fix available 10.0 HighApril 6, 2009