CVE-2016-1252
MEDIUMDebian jessie <1.0.9.8.4, Debian unstable <1.4~beta2, Ubuntu 14.04 ...
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-1252. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit leverages a memory allocation discrepancy in APT's handling of InRelease files to bypass signature validation, allowing an attacker to inject malicious repository metadata. The attack relies on ASLR and memory constraints to manipulate parsing behavior between the gpgv subprocess and the main apt-get process.
Description
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures.
Exploits (1)
This exploit leverages a memory allocation discrepancy in APT's handling of InRelease files to bypass signature validation, allowing an attacker to inject malicious repository metadata. The attack relies on ASLR and memory constraints to manipulate parsing behavior between the gpgv subprocess and the main apt-get process.
References (6)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N