debian advanced package tool

Name: debian advanced package tool
Brand: debian

productUS

cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical6high8medium7low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-3462US	high8.1	14.6% (97th)	Exploit	1.2.30	2019-01-28	2 versions
CVE-2016-1252US	medium5.9	7.25% (94th)	Exploit	1.0.9.8.4	2017-12-05	< 1.0.9.8.4
CVE-2009-1358US	high10.0OT elevated	4.48% (91st)	—	no fix	2009-04-21	18 versions
CVE-2014-0490US	high7.5	3.61% (89th)	—	no fix	2014-11-03	6 versions
CVE-2014-0489US	high7.5	3.61% (89th)	—	no fix	2014-11-03	3 versions
CVE-2014-6273US	medium6.8	2.44% (84th)	—	no fix	2014-09-30	≤ 1.0.1
CVE-2012-0954US	low2.6	2.19% (82nd)	—	no fix	2012-06-19	49 versions
CVE-2014-0488US	medium6.8	2.08% (81st)	—	no fix	2014-11-03	2 versions
CVE-2009-1300US	high10.0	1.86% (79th)	—	no fix	2009-04-16	= 0.7.20
CVE-2014-0487US	high7.5OT elevated	1.85% (79th)	—	no fix	2014-11-03	2 versions
CVE-2011-1829US	medium4.3	1.69% (77th)	—	0.8.15.2	2011-07-27	< 0.8.15.2
CVE-2012-3587US	low2.6	1.69% (77th)	—	no fix	2012-06-19	49 versions
CVE-2014-0478US	medium4.0	1.57% (75th)	—	no fix	2014-06-17	≤ 1.0.3
CVE-2013-1051US	medium4.3	1.34% (71st)	—	no fix	2013-03-21	= 0.8.16
CVE-2011-3374US	low3.7	1.19% (68th)	—	no fix	2019-11-26	—
CVE-2018-0501US	medium5.9	0.95% (61st)	—	1.6.4	2018-08-21	2 versions
CVE-2011-3634US	low2.6	0.81% (57th)	—	no fix	2014-03-01	6 versions
CVE-2020-27351US	low2.8	0.40% (34th)	—	2.1.30ubuntu1.1	2020-12-10	5 versions
CVE-2014-7206US	low3.6	0.39% (33rd)	—	no fix	2014-10-15	2 versions
CVE-2020-27350US	medium5.7	0.38% (32nd)	—	1.8.2.2	2020-12-10	5 versions
CVE-2012-0961US	low2.1	0.35% (29th)	—	no fix	2012-12-26	= 0.8.16

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-300Channel Accessible by Non-Endpoint1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.