Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Debian DSA-4808-1 Critical: APT DoS Input Validation Issue

debian
Calendar Grey December 9, 2020
Debian Logo
Debian Security Notice DSA-4810-2 informs about a vulnerability in dpkg's handling of package metadata that could lead to system crashes with improperly constructed .deb packages.
It was discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could cause out-of-bounds reads or infinite loops, resulting i...
Topics%20covered

Topics Covered

security advisory denial of service debian input validation upgrade recommendation apt

Summary

For the stable distribution (buster), this problem has been fixed in
version 1.8.2.2.

We recommend that you upgrade your apt packages.

For the detailed security status of apt please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/apt

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: apt
CVE ID: CVE-2020-27350

Topics%20covered

Topics Covered

security advisory denial of service debian input validation upgrade recommendation apt

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here