Remote Code Execution Bug Patched in APT Linux Package Manager

guest · Jan 22, 2019

Remote Code Execution Bug Patched in APT Linux Package Manager
January 22, 2019
https://www.bleepingcomputer.com/ne...ion-bug-patched-in-apt-linux-package-manager/

As described by Justicz, the APT vulnerability present in the package manager starting with version 0.8.15 "allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a machine installing any package. The bug has been fixed in the latest versions of apt."

Moreover, as detailed in the DSA-4371-1 Debian Security Advisory by Yves-Alexis Perez:

The code handling HTTP redirects in the HTTP transport method doesn't properly sanitize fields transmitted over the wire. This vulnerability could be used by an attacker located as a man-in-the-middle between APT and a mirror to inject malicious content in the HTTP connection. [...]
The RCE bug has been fixed today in the APT 1.2.29ubuntu0.1, 1.7.0ubuntu0.1, 1.0.1ubuntu2.19, and 1.6.6ubuntu0.1 packages, as well as in APT 1.4.9 for the Debian distribution.
Click to expand...

Log in or Sign up

Remote Code Execution Bug Patched in APT Linux Package Manager

guest Guest

Log in or Sign up

Remote Code Execution Bug Patched in APT Linux Package Manager

guest Guest

Useful Searches