Apt

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:debian:apt:0.9.7:*:*:*:*:*:*:*

part: a version: 0.9.7 update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductApt (a68c8d5d-8abb-5c7a-ba11-8824bcb2f605)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:Deb/ubuntu/apt purl2cpe 2026-06-01 10:17:14.849052
pkg:deb/debian/apt purl2cpe 2026-06-01 10:17:14.849050
pkg:github/pop-os/apt purl2cpe 2026-06-01 10:17:14.849054
pkg:gitlab/kalilinux/apt purl2cpe 2026-06-01 10:17:14.849055
pkg:rpm/fedora/apt purl2cpe 2026-06-01 10:17:14.849057
pkg:rpm/opensuse/apt purl2cpe 2026-06-01 10:17:14.849058

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1051 vulnerable 2026-06-08 05:03:52.316001 Details available
apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.
Published: 2013-03-21T17:00:00.000Z
Updated: 2024-09-17T02:47:34.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0961 vulnerable 2026-06-08 05:00:46.753701 Details available
Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file.
Published: 2012-12-26T22:00:00.000Z
Updated: 2024-09-16T17:28:35.582Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.