https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:57:49 +0000 https://vulnerability.circl.lu/vuln/cve-2019-3462 <p><strong>Affected:</strong> Debian GNU/Linux apt as used in Debian Stretch and Ubuntu</p> <p>Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.</p> <p><strong>Affected:</strong> Debian GNU/Linux apt as used in Debian Stretch and Ubuntu</p> <p>Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.</p> https://vulnerability.circl.lu/vuln/cve-2019-3462 https://vulnerability.circl.lu/vuln/usn-3863-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apt, Ubuntu:16.04:LTS: apt, Ubuntu:18.04:LTS: apt</p> <p>Max Justicz discovered that APT incorrectly handled certain parameters during redirects. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apt, Ubuntu:16.04:LTS: apt, Ubuntu:18.04:LTS: apt</p> <p>Max Justicz discovered that APT incorrectly handled certain parameters during redirects. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages.</p> https://vulnerability.circl.lu/vuln/usn-3863-1