What’s Vulnerable › Vulnerabilities

CVE-2013-1051

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-03-21 · updated 2026-06-16
• Weakness: CWE-20

Description

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.

Affected products

• Canonical Ubuntu Linux: 11.10, 12.04, 12.10
• Debian Advanced Package Tool: 0.8.16
• Debian apt: 0.9.7

References

• http://osvdb.org/91428
• http://secunia.com/advisories/52633
• http://www.ubuntu.com/usn/USN-1762-1
• http://osvdb.org/91428
• http://secunia.com/advisories/52633
• http://www.ubuntu.com/usn/USN-1762-1

Get alerted when CVE-2013-1051 or the next vulnerability affects your stack