• info
• discussion
• exploit
• solution
• references

apt-listchanges Unsafe Paths Library Import Local Shell Code Execution Vulnerability

The 'apt-listchanges' tool is prone to a vulnerability that allows arbitrary shell code to run. This issue occurs because the software uses unsafe paths when importing certain libraries.

Attackers can exploit this issue to execute arbitrary shell code with superuser privileges. Successful attacks will completely compromise the computer.

Versions prior to apt-listchanges 2.82 are vulnerable.