Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

New upstream release with CVE fixed 

https://security-tracker.debian.org/tracker/CVE-2020-3810

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

When normalizing ar member names by removing trailing whitespace and slashes, an out-out-bound read can be caused if the ar member name consists only of such characters, because the code did not stop at 0, but would wrap around and continue reading from the stack, without any limit.

For Debian 8 'Jessie', this problem has been fixed in version 1.0.9.8.6.

We recommend that you upgrade your apt packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4359-1 advisory.

    It was discovered that APT incorrectly handled certain filenames during package installation. If an     attacker could provide a specially crafted package to be installed by the system administrator, this could     cause APT to crash.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Shuaibing Lu discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could result in denial of service when processing specially crafted deb files.

ID	Name	Product	Family	Severity
138657	Fedora 32 : apt (2020-f03cfe3df5)	Nessus	Fedora Local Security Checks	medium
136631	Debian DLA-2210-1 : apt security update	Nessus	Debian Local Security Checks	medium
136608	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : APT vulnerability (USN-4359-1)	Nessus	Ubuntu Local Security Checks	medium
136591	Debian DSA-4685-1 : apt - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-3810

medium

Tenable Plugins

medium

medium

medium

medium