CVE-2011-3374 It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.
LowCVSS 3.7
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/apt(Debian:12) | All versions | No fix listed |
| debian/apt(Debian:12) | = 2.6.1 | No fix listed |
| debian/apt(Debian:12) | = 2.7.0 | No fix listed |
| debian/apt(Debian:12) | = 2.7.1 | No fix listed |
| debian/apt(Debian:12) | = 2.7.10 | No fix listed |
| debian/apt(Debian:12) | = 2.7.10+nmu1~exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.7.10+nmu1~exp2 | No fix listed |
| debian/apt(Debian:12) | = 2.7.11 | No fix listed |
| debian/apt(Debian:12) | = 2.7.12 | No fix listed |
| debian/apt(Debian:12) | = 2.7.12+nmu1 | No fix listed |
| debian/apt(Debian:12) | = 2.7.12+nmu1~exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.7.13 | No fix listed |
| debian/apt(Debian:12) | = 2.7.14 | No fix listed |
| debian/apt(Debian:12) | = 2.7.2 | No fix listed |
| debian/apt(Debian:12) | = 2.7.3 | No fix listed |
| debian/apt(Debian:12) | = 2.7.4 | No fix listed |
| debian/apt(Debian:12) | = 2.7.5 | No fix listed |
| debian/apt(Debian:12) | = 2.7.6 | No fix listed |
| debian/apt(Debian:12) | = 2.7.7 | No fix listed |
| debian/apt(Debian:12) | = 2.7.8 | No fix listed |
| debian/apt(Debian:12) | = 2.7.9 | No fix listed |
| debian/apt(Debian:12) | = 2.9.0 | No fix listed |
| debian/apt(Debian:12) | = 2.9.1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.10 | No fix listed |
| debian/apt(Debian:12) | = 2.9.11 | No fix listed |
Show 125 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/apt(Debian:12) | = 2.9.12 | No fix listed |
| debian/apt(Debian:12) | = 2.9.13 | No fix listed |
| debian/apt(Debian:12) | = 2.9.14 | No fix listed |
| debian/apt(Debian:12) | = 2.9.14+noAptKey1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.15 | No fix listed |
| debian/apt(Debian:12) | = 2.9.16 | No fix listed |
| debian/apt(Debian:12) | = 2.9.17 | No fix listed |
| debian/apt(Debian:12) | = 2.9.17+exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.18 | No fix listed |
| debian/apt(Debian:12) | = 2.9.18+exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.18+exp2 | No fix listed |
| debian/apt(Debian:12) | = 2.9.18+exp3 | No fix listed |
| debian/apt(Debian:12) | = 2.9.19 | No fix listed |
| debian/apt(Debian:12) | = 2.9.2 | No fix listed |
| debian/apt(Debian:12) | = 2.9.20 | No fix listed |
| debian/apt(Debian:12) | = 2.9.21 | No fix listed |
| debian/apt(Debian:12) | = 2.9.22 | No fix listed |
| debian/apt(Debian:12) | = 2.9.23 | No fix listed |
| debian/apt(Debian:12) | = 2.9.24 | No fix listed |
| debian/apt(Debian:12) | = 2.9.25 | No fix listed |
| debian/apt(Debian:12) | = 2.9.25+exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.26 | No fix listed |
| debian/apt(Debian:12) | = 2.9.26+exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.27 | No fix listed |
| debian/apt(Debian:12) | = 2.9.27+exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.28 | No fix listed |
| debian/apt(Debian:12) | = 2.9.28+exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.29 | No fix listed |
| debian/apt(Debian:12) | = 2.9.29+exp1 | No fix listed |
| debian/apt(Debian:12) | = 2.9.29+exp2 | No fix listed |
| debian/apt(Debian:12) | = 2.9.3 | No fix listed |
| debian/apt(Debian:12) | = 2.9.30 | No fix listed |
| debian/apt(Debian:12) | = 2.9.31 | No fix listed |
| debian/apt(Debian:12) | = 2.9.32 | No fix listed |
| debian/apt(Debian:12) | = 2.9.33 | No fix listed |
| debian/apt(Debian:12) | = 2.9.34 | No fix listed |
| debian/apt(Debian:12) | = 2.9.35 | No fix listed |
| debian/apt(Debian:12) | = 2.9.4 | No fix listed |
| debian/apt(Debian:12) | = 2.9.5 | No fix listed |
| debian/apt(Debian:12) | = 2.9.6 | No fix listed |
| debian/apt(Debian:12) | = 2.9.7 | No fix listed |
| debian/apt(Debian:12) | = 2.9.8 | No fix listed |
| debian/apt(Debian:12) | = 2.9.9 | No fix listed |
| debian/apt(Debian:12) | = 3.0.0 | No fix listed |
| debian/apt(Debian:12) | = 3.0.1 | No fix listed |
| debian/apt(Debian:12) | = 3.0.2 | No fix listed |
| debian/apt(Debian:12) | = 3.0.3 | No fix listed |
| debian/apt(Debian:12) | = 3.1.0 | No fix listed |
| debian/apt(Debian:12) | = 3.1.1 | No fix listed |
| debian/apt(Debian:12) | = 3.1.10 | No fix listed |
| debian/apt(Debian:12) | = 3.1.11 | No fix listed |
| debian/apt(Debian:12) | = 3.1.12 | No fix listed |
| debian/apt(Debian:12) | = 3.1.13 | No fix listed |
| debian/apt(Debian:12) | = 3.1.14 | No fix listed |
| debian/apt(Debian:12) | = 3.1.15 | No fix listed |
| debian/apt(Debian:12) | = 3.1.16 | No fix listed |
| debian/apt(Debian:12) | = 3.1.2 | No fix listed |
| debian/apt(Debian:12) | = 3.1.3 | No fix listed |
| debian/apt(Debian:12) | = 3.1.4 | No fix listed |
| debian/apt(Debian:12) | = 3.1.5 | No fix listed |
| debian/apt(Debian:12) | = 3.1.6 | No fix listed |
| debian/apt(Debian:12) | = 3.1.7 | No fix listed |
| debian/apt(Debian:12) | = 3.1.8 | No fix listed |
| debian/apt(Debian:12) | = 3.1.9 | No fix listed |
| debian/apt(Debian:12) | = 3.2.0 | No fix listed |
| debian/apt(Debian:12) | = 3.3.0 | No fix listed |
| debian/apt(Debian:12) | = 3.3.1 | No fix listed |
| debian/apt(Debian:12) | = 3.3.2 | No fix listed |
| debian/apt(Debian:12) | = 3.3.3 | No fix listed |
| debian/apt(Debian:12) | = 3.3.4 | No fix listed |
| debian/apt(Debian:13) | All versions | No fix listed |
| debian/apt(Debian:13) | = 3.0.3 | No fix listed |
| debian/apt(Debian:13) | = 3.1.0 | No fix listed |
| debian/apt(Debian:13) | = 3.1.1 | No fix listed |
| debian/apt(Debian:13) | = 3.1.10 | No fix listed |
| debian/apt(Debian:13) | = 3.1.11 | No fix listed |
| debian/apt(Debian:13) | = 3.1.12 | No fix listed |
| debian/apt(Debian:13) | = 3.1.13 | No fix listed |
| debian/apt(Debian:13) | = 3.1.14 | No fix listed |
| debian/apt(Debian:13) | = 3.1.15 | No fix listed |
| debian/apt(Debian:13) | = 3.1.16 | No fix listed |
| debian/apt(Debian:13) | = 3.1.2 | No fix listed |
| debian/apt(Debian:13) | = 3.1.3 | No fix listed |
| debian/apt(Debian:13) | = 3.1.4 | No fix listed |
| debian/apt(Debian:13) | = 3.1.5 | No fix listed |
| debian/apt(Debian:13) | = 3.1.6 | No fix listed |
| debian/apt(Debian:13) | = 3.1.7 | No fix listed |
| debian/apt(Debian:13) | = 3.1.8 | No fix listed |
| debian/apt(Debian:13) | = 3.1.9 | No fix listed |
| debian/apt(Debian:13) | = 3.2.0 | No fix listed |
| debian/apt(Debian:13) | = 3.3.0 | No fix listed |
| debian/apt(Debian:13) | = 3.3.1 | No fix listed |
| debian/apt(Debian:13) | = 3.3.2 | No fix listed |
| debian/apt(Debian:13) | = 3.3.3 | No fix listed |
| debian/apt(Debian:13) | = 3.3.4 | No fix listed |
| debian/apt(Debian:14) | All versions | No fix listed |
| debian/apt(Debian:14) | = 3.0.3 | No fix listed |
| debian/apt(Debian:14) | = 3.1.0 | No fix listed |
| debian/apt(Debian:14) | = 3.1.1 | No fix listed |
| debian/apt(Debian:14) | = 3.1.10 | No fix listed |
| debian/apt(Debian:14) | = 3.1.11 | No fix listed |
| debian/apt(Debian:14) | = 3.1.12 | No fix listed |
| debian/apt(Debian:14) | = 3.1.13 | No fix listed |
| debian/apt(Debian:14) | = 3.1.14 | No fix listed |
| debian/apt(Debian:14) | = 3.1.15 | No fix listed |
| debian/apt(Debian:14) | = 3.1.16 | No fix listed |
| debian/apt(Debian:14) | = 3.1.2 | No fix listed |
| debian/apt(Debian:14) | = 3.1.3 | No fix listed |
| debian/apt(Debian:14) | = 3.1.4 | No fix listed |
| debian/apt(Debian:14) | = 3.1.5 | No fix listed |
| debian/apt(Debian:14) | = 3.1.6 | No fix listed |
| debian/apt(Debian:14) | = 3.1.7 | No fix listed |
| debian/apt(Debian:14) | = 3.1.8 | No fix listed |
| debian/apt(Debian:14) | = 3.1.9 | No fix listed |
| debian/apt(Debian:14) | = 3.2.0 | No fix listed |
| debian/apt(Debian:14) | = 3.3.0 | No fix listed |
| debian/apt(Debian:14) | = 3.3.1 | No fix listed |
| debian/apt(Debian:14) | = 3.3.2 | No fix listed |
| debian/apt(Debian:14) | = 3.3.3 | No fix listed |
| debian/apt(Debian:14) | = 3.3.4 | No fix listed |
| debian advanced package tool | All versions | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| debian linux | = 10.0 | No fix listed |
| apt | = All versions | No fix listed |
References
- Debian Security Tracker CVE-2011-3374 third-party-advisory vendor-advisory
- access.redhat.com broken-link
- bugs.debian.org issue-tracking mailing-list third-party-advisory
- people.canonical.com third-party-advisory
- seclists.org exploit mailing-list third-party-advisory
- snyk.io broken-link
- ubuntu.com third-party-advisory
- bugs.debian.org issue-tracking