10

CVE-2009-1358: debian advanced_package_tool

CVSS: 10.0v2.0HighModified
AliasesDEBIAN-CVE-2009-1358
Published 21-04-2009Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2009-1358 is a high (CVSS 10.0) vulnerability in debian advanced_package_tool. EPSS estimates a 4.48% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
4.48%
0%100%
Low · +0.09 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2
DSA-1779-1DTSA-199-1

Timeline

  1. 21-04-2009
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

4.48%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

+0.09 pp

From 4.40% on 18-09-2026

18-09-202618-10-2026
EPSS score
4.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Debian3 products
  • apt< 0.7.21
  • advanced_package_tool≤ 0.7.20 | 0.7.0 | 0.7.1 | 0.7.2 | 0.7.2-0.1 | 0.7.10 | 0.7.11 | 0.7.12 | 0.7.13 | 0.7.14 | 0.7.15 | 0.7.15:exp1 | 0.7.15:exp2 | 0.7.15:exp3 | 0.7.16 | 0.7.17 | 0.7.17:exp1 | 0.7.17:exp2 | 0.7.17:exp3 | 0.7.17:exp4 | 0.7.18 | 0.7.19 | 0.7.20.1 | 0.7.20.2 | 0.7.21
  • apt0.0.1 | 0.0.2 | 0.0.3 | 0.0.4 | 0.0.5 | 0.0.6 | 0.0.7 | 0.0.8 | 0.0.9 | 0.0.10 | 0.0.11 | 0.0.12 | 0.0.13 | 0.0.13-bo1 | 0.0.14 | 0.0.15 | 0.0.15-0.1bo | 0.0.15-0.2bo | 0.0.16-1 | 0.0.17-1 | 0.1 | 0.1.1 | 0.1.3 | 0.1.5 | 0.1.6 | 0.1.7 | 0.1.9 | 0.3.0 | 0.3.1 | 0.3.2 | 0.3.3 | 0.3.4 | 0.3.6 | 0.3.7 | 0.3.9 | 0.3.11 | 0.3.12 | 0.3.13 | 0.3.14 | 0.3.15 | 0.3.16 | 0.3.17 | 0.3.18 | 0.3.19 | 0.5.0 | 0.5.1 | 0.5.2 | 0.5.3 | 0.5.4 | 0.5.5 | 0.5.5.1 | 0.5.6 | 0.5.7 | 0.5.8 | 0.5.9 | 0.5.10 | 0.5.11 | 0.5.12 | 0.5.13 | 0.5.14 | 0.5.15 | 0.5.16 | 0.5.17 | 0.5.18 | 0.5.19 | 0.5.20 | 0.5.21 | 0.5.22 | 0.5.23 | 0.5.24 | 0.5.25 | 0.5.26 | 0.5.27 | 0.5.28 | 0.5.29 | 0.5.30 | 0.5.30:ubuntu1 | 0.5.30:ubuntu2 | 0.5.31 | 0.5.32 | 0.6.0 | 0.6.1 | 0.6.2 | 0.6.3 | 0.6.4 | 0.6.5 | 0.6.6 | 0.6.7 | 0.6.8 | 0.6.9 | 0.6.10 | 0.6.11 | 0.6.12 | 0.6.13 | 0.6.14 | 0.6.15 | 0.6.16 | 0.6.17 | 0.6.18 | 0.6.19 | 0.6.20 | 0.6.21 | 0.6.22 | 0.6.23 | 0.6.24 | 0.6.25 | 0.6.27 | 0.6.27:ubuntu1 | 0.6.27:ubuntu2 | 0.6.27:ubuntu3 | 0.6.27:ubuntu4 | 0.6.28 | 0.6.29 | 0.6.30 | 0.6.31 | 0.6.32 | 0.6.33 | 0.6.34 | 0.6.35 | 0.6.36 | 0.6.36:ubuntu1 | 0.6.37 | 0.6.38 | 0.6.39 | 0.6.40 | 0.6.40.1 | 0.6.41 | 0.6.42 | 0.6.42.1 | 0.6.42.2 | 0.6.42.3 | 0.6.43 | 0.6.43.1 | 0.6.43.2 | 0.6.43.3 | 0.6.44 | 0.6.44.1 | 0.6.44.1-0.1 | 0.6.44.2 | 0.6.44.2:exp1 | 0.6.45 | 0.6.46 | 0.6.46.1 | 0.6.46.2 | 0.6.46.3 | 0.6.46.3-0.1 | 0.6.46.3-0.2 | 0.6.46.4-0.1 | 0.7.3 | 0.7.4 | 0.7.5 | 0.7.6 | 0.7.7 | 0.7.8 | 0.7.9

1 vendor · 3 products

References

10 links