Debian Advanced Package Tool (APT) 0.8.13.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:debian:advanced_package_tool:0.8.13.2:*:*:*:*:*:*:*

part: a version: 0.8.13.2 update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductAdvanced Package Tool (54c1cf6d-fa55-5c38-8fb8-da09d2686f2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/apt purl2cpe 2026-06-01 10:17:13.505749
pkg:deb/ubuntu/apt purl2cpe 2026-06-01 10:17:13.505752
pkg:debian/apt-team/apt purl2cpe 2026-06-01 10:17:13.505751
pkg:github/debian/apt purl2cpe 2026-06-01 10:17:13.505753

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3587 vulnerable 2026-06-08 05:02:11.042872 Details available
APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install Trojan horse packages via a man-in-the-middle (MITM) attack.
Published: 2012-06-19T20:00:00.000Z
Updated: 2024-09-16T22:30:53.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0954 vulnerable 2026-06-08 05:00:46.644957 Details available
APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle (MITM) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3587.
Published: 2012-06-19T20:00:00.000Z
Updated: 2024-09-16T20:13:26.664Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.