Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
apt integer wraparound
Vulnerability Description
APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
apt 输入验证错误漏洞
Vulnerability Description
apt是Debian计划合作组织的一个命令行软件包管理器，它提供搜索、管理和查询软件包信息功能。 APT存在输入验证错误漏洞，该漏洞源于APT错误地处理了某些软件包。本地攻击者可能会使用此问题导致APT崩溃或停止响应，从而导致拒绝服务。以下产品及版本受到影响：apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions p
CVSS Information
N/A
Vulnerability Type
N/A