Vulnerability CVE-2020-3810
Published: 2020-05-15

Description:
Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

Type:

CWE-20

 (Improper Input Validation)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Debian -> APT 
Debian -> Debian linux 

 References:
https://bugs.launchpad.net/bugs/1878177
https://github.com/Debian/apt/issues/111
https://lists.debian.org/debian-security-announce/2020/msg00089.html
https://salsa.debian.org/apt-team/apt/-/commit/dceb1e49e4b8e4dadaf056be34088b415939cda6
https://tracker.debian.org/news/1144109/accepted-apt-212-source-into-unstable/
Copyright 2024, cxsecurity.com

 

Back to Top