TI-2020-03325 Aliases CVE-2020-3810 GHSA-q2xq-8h7m-vrfm

Out-of-bounds read in Debian apt

LOW 28CWE-125Published 2020-05-15 · Updated 2024-09-17

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

Why it matters now

EPSS 0.01338 71st percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed apt (Debian): 2.1.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Debian	apt	before 2.1.2	2.1.2	Patch available	CNA

apt VendorDebian Affected before 2.1.2 Fixed in 2.1.2 Patch available CNA

CPE configurations NVD · 10

CPE	Versions	Role	Vendor
cpe:2.3:a:debian:apt::::::::	before 2.1.2	Vulnerable	Debian
cpe:2.3:o:debian:debian_linux:9.0:::::::*	9.0	Vulnerable	Debian
cpe:2.3:o:debian:debian_linux:10.0:::::::*	10.0	Vulnerable	Debian
cpe:2.3:o:fedoraproject:fedora:32:::::::*	32	Vulnerable	Fedoraproject
cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::	12.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::	14.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::	16.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::	18.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:19.10:::::::*	19.10	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::	20.04	Vulnerable	Canonical

cpe:2.3:a:debian:apt:*:*:*:*:*:*:*:* Versions before 2.1.2 Vulnerable ·Debian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* Versions 32 Vulnerable ·Fedoraproject
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* Versions 12.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* Versions 19.10 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical

Remediation

Fix · CNA apt (Debian) Fixed in 2.1.2

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2020-3810
2026-10-03 Alias added: GHSA-q2xq-8h7m-vrfm

References

Exploit 1

https://github.com/Debian/apt/issues/111

Patch 1

https://salsa.debian.org/apt-team/apt/-/commit/dceb1e49e4b8e4dadaf056be34088b415939cda6

Advisory 6

TI-2009-01292 apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which… CVSS 2.0HIGH 10.0
TI-2013-00913 apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files… CVSS 2.0MEDIUM 4.3
TI-2014-06006 The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary… CVSS 2.0LOW 3.6
TI-2012-00885 Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences