CVE-2018-0501

The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for…

published August 21, 2018

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00954 · 61.0th percentile
Published
2018-08-21T00:00Z
EPSS history
Timeline
  • 21 AUG 00:00Z
    The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for…
    cvelistv5