CVE-2014-6273

advanced_package_tool < 1.0.1 - Buffer Overflow in HTTP Transport Code

Title source: llm

Description

Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the-middle attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted URL.

References (6)

Core 6

Core References

Patch, Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2353-1

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/70075

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/61710

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/96151

Vendor Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-3031

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/61605

Scores

EPSS 0.0244

EPSS Percentile 82.3%

Details

CWE

CWE-119

Status published

Products (1)

debian/advanced_package_tool < 1.0.1

Published Sep 30, 2014

Tracked Since Feb 18, 2026