VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 21, 2013· Updated Jun 16, 2026

CVE-2013-1051

CVE-2013-1051

Description

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Debian/Advanced Package Tool
    cpe:2.3:a:debian:advanced_package_tool:0.8.16:*:*:*:*:*:*:*
  • Debian/Apt
    cpe:2.3:a:debian:apt:0.9.7:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux3 versions
    cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
  • Ubuntu/aptllm-create
    Range: 0.8.16, 0.9.7

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.