It was found that apt-key in apt, all versions, do not... · CVE-2011-3374 · GitHub Advisory Database · GitHub

It was found that apt-key in apt, all versions, do not...

Moderate severity Unreviewed Published Apr 22, 2022 to the GitHub Advisory Database • Updated Apr 3, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.

References

Published by the National Vulnerability Database

Nov 26, 2019

Published to the GitHub Advisory Database Apr 22, 2022

Last updated Apr 3, 2024