This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-3810 →

DEBIAN-CVE-2020-3810

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted...

Original description

The description as published by the source.

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 apt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2"}]}]

Debian:13 apt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2"}]}]

Debian:14 apt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2"}]}]

References

advisory security-tracker.debian.org