DSA-3048-1: apt - security update
Summary
DSA-3048-1: apt - security update. Affects apt versions < 0.9.7.9+deb7u6. Fixed in 0.9.7.9+deb7u6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The apt package is a command-line tool used for package management in Debian-based operating systems. It allows users to install, upgrade, and remove software packages. The vulnerability in apt-get's changelog retrieval functionality allowed a local user to overwrite arbitrary files by exploiting insecure temporary file handling.
Vulnerability Detail
The vulnerability in apt-get's changelog retrieval functionality allowed a local user to overwrite arbitrary files. This was due to the insecure handling of temporary files. By exploiting this vulnerability, an attacker with local access could potentially overwrite critical system files, leading to privilege escalation or denial of service.
How To Fix
Minimum fixed version
0.9.7.9+deb7u6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade aptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The apt package in Debian-based operating systems was vulnerable to a local file overwrite issue in its changelog retrieval functionality. Upgrading to the fixed versions of the apt package is recommended to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for apt →
FAQ
The vulnerability allows a local user to overwrite arbitrary files, potentially leading to privilege escalation or denial of service.
Users of Debian 7 Wheezy and earlier versions, as well as users of the unstable distribution (sid) of Debian, are affected by this vulnerability.
There is no known exploit for this vulnerability at the time of this advisory.
The fs.protected_symlinks setting in the Linux kernel, enabled by default in Debian 7 Wheezy and up, neutralizes this vulnerability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground and it will alert you if the vulnerability is present.
Related vulnerabilities
Recent vulnerabilities recorded for apt.
