Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-3462

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to r

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
debian

Description

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Debian GNU/Linux apt as used in Debian Stretch and Ubuntu

  • 1.4.8 and earlieraffected

References