NetSight
IP …
high8.1

CVE-2019-3462

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, pot…

Impact

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.

Affected products

VendorProductAffected versions
DebianAdvanced Package Tool
before 1.2.30
from 1.3 through 1.4.8
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 18.10
DebianDebian Linux
Versions 8.0, 9.0
NetappActive Iq
All versions
NetappElement Software
All versions

References