CVE-2019-3462
EUVD-2019-1310128.01.2019, 21:29
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| debian | advanced_package_tool | 𝑥 < 1.2.30 |
| debian | advanced_package_tool | 1.3 ≤ 𝑥 ≤ 1.4.8 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 18.10 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| netapp | active_iq | - |
| netapp | element_software | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References