description: Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.
problem types: Remote code execution in apt
affected:
{
product: apt as used in Debian Stretch and Ubuntu
vendor: Debian GNU/Linux
versions:
status: affected, version: 1.4.8 and earlier
}