cve.bz

CVE-2012-0214

no score yetEPSS 1.3%

advanced package tool advanced package tool: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.

The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16~exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user from downloading the new InRelease file, which leaves the original InRelease file active and makes it more difficult to detect that the Packages file is modified and unsigned.
EPSS
1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE
CWE-264
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON