What’s Vulnerable › Vulnerabilities

CVE-2009-1300

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-04-16 · updated 2026-06-16
• Weakness: CWE-20

Description

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.

Affected products

• Debian Advanced Package Tool: 0.7.20

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213
• http://secunia.com/advisories/34829
• http://secunia.com/advisories/34832
• http://secunia.com/advisories/34874
• http://www.debian.org/security/2009/dsa-1779
• http://www.openwall.com/lists/oss-security/2009/04/08/11
• https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793
• https://usn.ubuntu.com/762-1/
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213
• http://secunia.com/advisories/34829
• http://secunia.com/advisories/34832
• http://secunia.com/advisories/34874

Get alerted when CVE-2009-1300 or the next vulnerability affects your stack