CVE-2019-3462

HIGH8.1EPSS 12.7%

apt - security update

Published: 1/28/2019Modified: 3/9/2026

Also known as:DSA-4371-1DEBIAN-CVE-2019-3462DLA-1637-1

Description

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.

Affected packages (3)

Debian/aptfrom 0, < 1.8.0~alpha3.1
Debian/aptfrom 0, < 1.0.9.8.5
Debian/aptfrom 0, < 1.4.9

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2019-3462