CVE-2016-1252

Related Files

Ubuntu Security Notice USN-3156-1

Posted Dec 14, 2016

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3156-1 - Jann Horn discovered that APT incorrectly handled InRelease files. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages.

tags | advisory, remote

systems | linux, ubuntu

advisories | CVE-2016-1252

SHA-256 | b7eb80c0b70482b71b386b58b45e73716f7e3508503ad770ba34c88879d48914

Download | Favorite | View

apt Repository Signing Bypass

Posted Dec 14, 2016

Authored by Jann Horn, Google Security Research

apt suffers from a repository signing bypass via memory allocation failure.

tags | exploit

advisories | CVE-2016-1252

SHA-256 | c29167700d9cf86ba6d903c347e03b32af971e7cb4e71b156fcea3249a80e545

Download | Favorite | View