CVE-2016-1252
published 2017-12-05CVE-2016-1252: The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before…
PriorityP345medium5.9CVSS 3.1
AVNACHPRNUINSUCNIHAN
EXPLOIT
EPSS
7.31%
93.7th percentile
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | advanced_package_tool | < 1.0.9.8.4 | 1.0.9.8.4 |
| debian | apt | < apt 1.4~beta2 (bookworm) | apt 1.4~beta2 (bookworm) |
| debian | apt | >= 0 < 1.4~beta2 | 1.4~beta2 |
| debian | apt | >= 0 < 1.4~beta2 | 1.4~beta2 |
| debian | apt | >= 0 < 1.4~beta2 | 1.4~beta2 |
| debian | apt | >= 0 < 1.4~beta2 | 1.4~beta2 |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv5.9MEDIUM
vendor_debian5.9MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
APT vulnerability
vendor_ubuntu·2016-12-13
CVE-2016-1252 APT vulnerability
Title: APT vulnerability
Summary: An attacker could trick APT into installing altered packages.
Jann Horn discovered that APT incorrectly handled InRelease files.
If a remote attacker were able to perform a machine-in-the-middle attack, this
flaw could potentially be used to install altered packages.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2016-1252: apt - The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4...
vendor_debian·2016·CVSS 5.9
CVE-2016-1252 [MEDIUM] CVE-2016-1252: apt - The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4...
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures.
Scope: local
bookworm: resolved (fixed in 1.4~beta2)
bullseye: resolved (fixed in 1.4~beta2)
forky: resolved (fixed in 1.4~beta2)
sid: resolved (fixed in 1.4~beta2)
trixie: resolved (fixed in 1.4~beta2)
GHSA
GHSA-53rm-7gr9-9hfx: The apt package in Debian jessie before 1
ghsa_unreviewed·2022-05-13
CVE-2016-1252 [MEDIUM] CWE-295 GHSA-53rm-7gr9-9hfx: The apt package in Debian jessie before 1
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures.
OSV
CVE-2016-1252: The apt package in Debian jessie before 1
osv·2017-12-05·CVSS 5.9
CVE-2016-1252 [MEDIUM] CVE-2016-1252: The apt package in Debian jessie before 1
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/140145/apt-Repository-Signing-Bypass.htmlhttp://www.ubuntu.com/usn/USN-3156-1https://bugs.chromium.org/p/project-zero/issues/detail?id=1020https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1647467https://www.debian.org/security/2016/dsa-3733https://www.exploit-db.com/exploits/40916/http://packetstormsecurity.com/files/140145/apt-Repository-Signing-Bypass.htmlhttp://www.ubuntu.com/usn/USN-3156-1https://bugs.chromium.org/p/project-zero/issues/detail?id=1020https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1647467https://www.debian.org/security/2016/dsa-3733https://www.exploit-db.com/exploits/40916/
2017-12-05
Published