CERT24Debian and Ubuntu APT flaw lets a man-in-the-middle attacker replace verified packages and run code as rootLoading data…
CERT24Threat Observatory
Period

Debian and Ubuntu APT flaw lets a man-in-the-middle attacker replace verified packages and run code as root

A flaw in APT for Debian and Ubuntu allows an attacker who can modify package downloads to replace a verified package with their own. When the package is installed, the attacker’s code runs as root.

← Back to intelligence

Debian and Ubuntu APT flaw lets a man-in-the-middle attacker replace verified packages and run code as root

A flaw in APT for Debian and Ubuntu allows an attacker who can modify package downloads to replace a verified package with their own. When the package is installed, the attacker’s code runs as root.