Read the docs

apt

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

apt records in CISA KEV

No apt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records

TI-2011-02984 CVE-2011-3374 · GHSA-xpxf-p5mx-cq4f

Improper signature verification in apt

Priority LOW 20

It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01191 Published 2019-11-25 No fix listed CWE-347
Open these records in search →