Apt

apt

Vendor: Debian • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-3810 3Canonical DebianFedoraproject 4Apt Debian LinuxFedora+1 more Jun 17, 2026 May 15, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.
CVE-2014-7206 1Debian 2Advanced Package Tool Apt May 6, 2026 Oct 15, 2014 N/A· v4 N/A· v3 3.6 LOW· v2 The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file.
CVE-2013-1051 2Canonical Debian 3Advanced Package Tool AptUbuntu Linux Apr 29, 2026 Mar 21, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity...Show more apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.Show less
CVE-2012-0961 1Debian 2Advanced Package Tool Apt Apr 29, 2026 Dec 26, 2012 N/A· v4 N/A· v3 2.1 LOW· v2 Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/...Show more Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file.Show less
CVE-2009-1358 1Debian 2Advanced Package Tool Apt Apr 23, 2026 Apr 21, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allo...Show more apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.Show less