CVE-2020-3810

Katalog CVE

CVSS 5.5 · Medium EPSS 1,3%

Kerentanan Improper Input Validation pada debian apt, debian linux +2 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

Rincian

Terbit di NVD

15 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.debian.org/debian-security-announce/2020/msg00089.html mailing list · advisory vendor
• https://salsa.debian.org/apt-team/apt/-/commit/dceb1e49e4b8e4dadaf056be34088b415939cda6 patch · advisory vendor
• https://tracker.debian.org/news/1144109/accepted-apt-212-source-into-unstable/ release notes · advisory vendor
• https://bugs.launchpad.net/bugs/1878177 issue tracking · advisory pihak ketiga
• https://github.com/Debian/apt/issues/111 exploit · advisory pihak ketiga
• https://usn.ubuntu.com/4359-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4359-2/ advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4PEH357MZM2S...