USN-2353-1

Dashboard / Vulnerabilities / USN-2353-1

USN-2353-1

Summary: apt vulnerability

Details: It was discovered that APT incorrectly handled certain http URLs. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to cause APT to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service. (CVE-2014-6273) In addition, this update fixes regressions introduced by the USN-2348-1 security update: APT incorrectly handled file:/// sources on a different partition, incorrectly handled Dir::state::lists set to a relative path, and incorrectly handled cdrom: sources.

References: https://ubuntu.com/security/notices/USN-2353-1, https://ubuntu.com/security/CVE-2014-6273