CVE-2014-0490

Publication date 16 September 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package.

Status

Package Ubuntu Release Status
apt 14.04 LTS trusty
Fixed 1.0.1ubuntu2.3
12.04 LTS precise
Fixed 0.8.16~exp12ubuntu10.19
10.04 LTS lucid
Fixed 0.7.25.3ubuntu9.16

References

Related Ubuntu Security Notices (USN)

    • USN-2348-1
    • APT vulnerabilities
    • 16 September 2014

Other references