CVE-2014-0488

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2014-0488

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-0488.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2014-0488

Related

Published

2014-11-03T22:55:07Z

Modified

2025-04-12T10:46:40Z

Summary

[none]

Details

APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data.

References

Affected packages

Debian:11 / apt

Package

Name: apt
Purl: pkg:deb/debian/apt?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / apt

Package

Name: apt
Purl: pkg:deb/debian/apt?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / apt

Package

Name: apt
Purl: pkg:deb/debian/apt?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.9

Ecosystem specific

{
    "urgency": "not yet assigned"
}