{"id":8019,"date":"2019-01-30T10:47:05","date_gmt":"2019-01-30T10:47:05","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=8019"},"modified":"2026-04-17T18:07:55","modified_gmt":"2026-04-17T18:07:55","slug":"aptapt-get-rce-vulnerability-cve-2019-3462-handling-guide","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/aptapt-get-rce-vulnerability-cve-2019-3462-handling-guide\/","title":{"rendered":"APT\/APT-GET RCE Vulnerability (CVE-2019-3462) Handling Guide"},"content":{"rendered":"


\n<\/p>\n

1 Vulnerability Overview<\/strong><\/h2>\n

Recently, a security researcher discovered a critical vulnerability in the Advanced Packaging Tool (APT) of Linux. This vulnerability stems from the APT’s failure to properly handle redirects, which can be triggered via a man-in-the-middle attack or a malicious package mirror, resulting in remote code execution.<\/p>\n

By changing the flag bit of the response, an attacker can redirect the download link of an installation package to a malicious server. In this case, if the attacker also changes the hash in communication data to that of the malicious package, he or she can get by the local authentication of the APT. The attacker can then trigger the vulnerability via a man-in-the-middle attack in the network environment or the mirror download server controlled by him or her, so as to execute malicious code with root privileges.<\/p>\n

\"Red<\/a><\/p>\n

Reference link:<\/p>\n

https:\/\/justi.cz\/security\/2019\/01\/22\/apt-rce.html<\/p>\n

2 Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/p>\n