CVE-2011-1829: Input Validation
Published Jul 27, 2011
·Updated
APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to install modified packages via vectors involving lack of an initial clearsigned message.
Affected Software
2 affected components
Debian Advanced Package Tool<0.8.15.2
Canonical Ubuntu Linux=11.04
Remediation
Event History
Jul 27, 2011
CVE Published
via MITRE·01:29 AM
Data Sourced
via MITRE·01:29 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1829?
The severity of CVE-2011-1829 is classified as high due to its potential for man-in-the-middle attacks.
2
How do I fix CVE-2011-1829?
To fix CVE-2011-1829, update APT to version 0.8.15.2 or later.
3
What software is affected by CVE-2011-1829?
CVE-2011-1829 affects versions of APT prior to 0.8.15.2 and Ubuntu Linux 11.04.
4
What potential exploits are associated with CVE-2011-1829?
CVE-2011-1829 allows attackers to install modified packages by exploiting improper validation of GPG signatures.
5
Who are the potential attackers for CVE-2011-1829?
Man-in-the-middle attackers are the potential threat actors associated with CVE-2011-1829.