Summary
It was discovered that APT incorrectly handled certain filenames during
package installation. If an attacker could provide a specially crafted
package to be installed by the system administrator, this could cause APT
to crash.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | apt | 1.2.32ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | apt | 1.6.12ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | apt | 2.0.2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service wh…
References
-
report
https://ubuntu.com/security/CVE-2020-3810