CVE-2014-6273

Description

Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the-middle attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted URL.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/96151

http://www.ubuntu.com/usn/USN-2353-1

http://www.securityfocus.com/bid/70075

http://www.debian.org/security/2014/dsa-3031

http://secunia.com/advisories/61710

http://secunia.com/advisories/61605

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3