CVE-2019-3462
HIGH8.1EPSS 12.7%apt - security update
發布日:2019/1/28修改日:2026/3/9
描述
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.
受影響套件(3)
- Debian/aptfrom 0, < 1.8.0~alpha3.1
- Debian/aptfrom 0, < 1.0.9.8.5
- Debian/aptfrom 0, < 1.4.9
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |