ByteOS Network

apt-cacher

Source -

NVD

CNA CVEs -

ADP CVEs -

CISA CVEs -

NVD CVEs -

3Vulnerabilities found

CVE-2017-7443

Assigner-MITRE Corporation

View Details

Assigner-MITRE Corporation

CVSS Score-6.1||MEDIUM

EPSS-0.71% / 49.89%

7 Day CHG~0.00%

Published-05 Apr, 2017 | 20:00

Updated-13 May, 2026 | 00:24

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.

Vendor-apt-cacher-ng_project apt-cacher_project n/a

Product-apt-cacher-ng apt-cacher n/a

CWE ID-CWE-113

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

CVE-2014-4510

Assigner-Debian GNU/Linux

View Details

Assigner-Debian GNU/Linux

CVSS Score-4.3||MEDIUM

EPSS-0.98% / 58.57%

7 Day CHG~0.00%

Published-06 Oct, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Vendor-n/a Debian GNU/Linux

Product-apt-cacher n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2005-1854

Assigner-Debian GNU/Linux

View Details

Assigner-Debian GNU/Linux

CVSS Score-7.5||HIGH

EPSS-2.13% / 80.03%

7 Day CHG~0.00%

Published-05 Aug, 2005 | 04:00

Updated-16 Apr, 2026 | 00:27

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server.

Vendor-n/a Debian GNU/Linux

Product-apt-cacher n/a