Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
APT 输入验证错误漏洞
Vulnerability Description
APT（Advanced Packaging Tool）是一套基于Debian系统及其派生发行版的强大的包管理工具。该工具可自动下载、配置、安装二进制或源代码格式的软件包。 APT 1.0.9之前版本中存在安全漏洞，该漏洞源于程序启用Acquire::GzipIndexes选项时，没有验证校验和。远程攻击者可借助特制的数据包利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A