CVE-2009-1358
N/A
Published: April 21, 2009 at 11:00 PM UTC
Updated: June 16, 2026 at 11:07 PM UTC
2 products affected across 1 vendorAdvanced Package ToolApt
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
0.0.10.0.100.0.110.0.120.0.130.0.13-bo10.0.140.0.150.0.15-0.1bo0.0.15-0.2bo0.0.16-10.0.17-10.0.20.0.30.0.40.0.50.0.60.0.70.0.80.0.90.10.1.10.1.30.1.50.1.60.1.70.1.90.3.00.3.10.3.110.3.120.3.130.3.140.3.150.3.160.3.170.3.180.3.190.3.20.3.30.3.40.3.60.3.70.3.90.5.00.5.10.5.100.5.110.5.120.5.130.5.140.5.150.5.160.5.170.5.180.5.190.5.20.5.200.5.210.5.220.5.230.5.240.5.250.5.260.5.270.5.280.5.290.5.30.5.300.5.30 ubuntu10.5.30 ubuntu20.5.310.5.320.5.40.5.50.5.5.10.5.60.5.70.5.80.5.90.6.00.6.10.6.100.6.110.6.120.6.130.6.140.6.150.6.160.6.170.6.180.6.190.6.20.6.200.6.210.6.220.6.230.6.240.6.250.6.270.6.27 ubuntu10.6.27 ubuntu20.6.27 ubuntu30.6.27 ubuntu40.6.280.6.290.6.30.6.300.6.310.6.320.6.330.6.340.6.350.6.360.6.36 ubuntu10.6.370.6.380.6.390.6.40.6.400.6.40.10.6.410.6.420.6.42.10.6.42.20.6.42.30.6.430.6.43.10.6.43.20.6.43.30.6.440.6.44.10.6.44.1-0.10.6.44.20.6.44.2 exp10.6.450.6.460.6.46.10.6.46.20.6.46.30.6.46.3-0.10.6.46.3-0.20.6.46.4-0.10.6.50.6.60.6.70.6.80.6.90.7.30.7.40.7.50.7.60.7.70.7.80.7.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (9)
Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2009/dsa-1779x_refsource_CONFIRM
Source: [email protected]
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/50086Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card