CVE-2020-3810

Published: May 15, 2020

Modified: Sep 17, 2024

PUBLISHED

Description

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

Vendor	Product	Versions
Debian	apt	affected `before 2.1.2`

References

https://github.com/Debian/apt/issues/111

x_refsource_MISC

https://bugs.launchpad.net/bugs/1878177

x_refsource_MISC

https://salsa.debian.org/apt-team/apt/-/commit/dceb1e49e4b8e4dadaf056be34088b415939cda6

x_refsource_MISC

https://lists.debian.org/debian-security-announce/2020/msg00089.html

x_refsource_MISC

https://tracker.debian.org/news/1144109/accepted-apt-212-source-into-unstable/

x_refsource_MISC

USN-4359-1

vendor-advisory

x_refsource_UBUNTU

USN-4359-2

vendor-advisory

x_refsource_UBUNTU

FEDORA-2020-f03cfe3df5

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-3810

Description

Affected Products

References