PatchTheCVEapt-cacher vulnerabilities and fixes
Recent CVEs affecting apt-cacher, with upgrade or downgrade steps. 2 tracked.
Also searched as: apt cacher.
apt-cacher has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-04-05. Highest priority: CVE-2014-4510 (score 41/100).
- CVE-2017-7443 MEDIUM 6.1 UPGRADE UPGRADE apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline charac
- CVE-2014-4510 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject a
FAQ
How do I fix apt-cacher vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is apt-cacher being exploited right now?
None of the tracked apt-cacher CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which apt-cacher CVE should I patch first?
CVE-2014-4510 currently ranks highest (41/100): Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject a.