Home

CVE-2019-3462

Description

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
6.994

Associated Vulnerability

VulnerabilityOS Platform
Advanced front-end for dpkg (USN-3863-1) apt_1.6.6ubuntu0.1_i386.debLinux
Advanced front-end for dpkg (USN-3863-1) apt_1.6.6ubuntu0.1_amd64.debLinux
Advanced front-end for dpkg (USN-3863-1) apt_1.7.0ubuntu0.1_i386.debLinux
Advanced front-end for dpkg (USN-3863-1) apt_1.7.0ubuntu0.1_amd64.debLinux
Advanced front-end for dpkg (USN-3863-1) apt_1.0.1ubuntu2.19_i386.debLinux
Advanced front-end for dpkg (USN-3863-1) apt_1.0.1ubuntu2.19_amd64.debLinux
Advanced front-end for dpkg (USN-3863-1) apt_1.2.29ubuntu0.1_i386.debLinux
Advanced front-end for dpkg (USN-3863-1) apt_1.2.29ubuntu0.1_amd64.debLinux
apt security update(DSA-4371-1) apt_1.4.9_i386.debLinux
apt security update(DSA-4371-1) apt_1.4.9_amd64.debLinux
CVE-2019-3462NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234