[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWo4AYEkvNrgWoVNRZvkY1Y8SCXBDvSxyfbJNn9sUrdw":3,"g5a-risk:CVE-2016-1252":171},{"success":4,"data":5,"meta":169},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":62,"references":63,"referencesCount":105,"weaknesses":106,"weaknessesCount":115,"isActivelyExploited":116,"cisaInfo":26,"otxData":26,"relatedBlogPosts":117,"seoMetadata":118,"configurations":143,"relatedVendorCves":167,"notableEvents":168},"CVE-2016-1252","What is CVE-2016-1252?","The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection mechanism by leveraging improper error handling when validating InRelease file signatures.","The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS befor...","2017-12-05T16:29:00.203","2025-04-20T01:37:25.86",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":25,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",4.3,8.6,2.9,0.07248,[38,38,38,38,38,38,38],"Medium",[42,47,51,56,59],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"debian","advanced_package_tool","*","cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":52,"product":53,"version":60,"criteria":61,"vulnerable":4},"16.10","cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",5,[64,71,75,80,84,89,93,95,97,99,101,103],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F140145\u002Fapt-Repository-Signing-Bypass.html","Packetstormsecurity",[68,69,70],"Issue Tracking","Third Party Advisory","VDB Entry",{"url":72,"source":73,"tags":74},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-3156-1","Ubuntu",[69],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fbugs.chromium.org\u002Fp\u002Fproject-zero\u002Fissues\u002Fdetail?id=1020","Chromium",[79,68,69],"Exploit",{"url":81,"source":82,"tags":83},"https:\u002F\u002Fbugs.launchpad.net\u002Fubuntu\u002F+source\u002Fapt\u002F+bug\u002F1647467","Launchpad",[79,68,69],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3733","Debian",[68,88],"Vendor Advisory",{"url":90,"source":91,"tags":92},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F40916\u002F","Exploit-db",[79,68,69,70],{"url":65,"source":66,"tags":94},[68,69,70],{"url":72,"source":73,"tags":96},[69],{"url":76,"source":77,"tags":98},[79,68,69],{"url":81,"source":82,"tags":100},[79,68,69],{"url":85,"source":86,"tags":102},[68,88],{"url":90,"source":91,"tags":104},[79,68,69,70],12,[107],{"id":108,"name":109,"description":110,"extendedDescription":111,"status":112,"abstraction":113,"structure":114},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":119,"metaDescription":120,"keywords":121,"canonicalUrl":122,"structuredData":123},"What is CVE-2016-1252? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-1252, a medium severity cyber security vulnerability from 2017. The apt package in Debian jessie before 1.0.9.8.4, in Debi...","CVE-2016-1252, CVE-2016-1252 vulnerability, CVE-2016-1252 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, debian security, canonical security, advanced_package_tool vulnerability, debian_linux vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2016-1252",{"@context":124,"@type":125,"headline":119,"description":120,"datePublished":10,"dateModified":11,"author":126,"publisher":130,"about":134,"mainEntityOfPage":138,"articleSection":141,"keywords":142},"https:\u002F\u002Fschema.org","TechArticle",{"@type":127,"name":128,"url":129},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":127,"name":128,"url":129,"logo":131},{"@type":132,"url":133},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":135,"name":6,"description":136,"additionalType":137},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":139,"@id":140},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-1252","Cybersecurity","CVE-2016-1252, CVE-2016-1252 vulnerability, CVE-2016-1252 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[144,157],{"Operator":145,"Negate":26,"Nodes":146},"AND",[147,153],{"Operator":148,"Negate":26,"CPEMatch":149},"OR",[150],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":152,"VersionEndIncluding":26},"8ACF9D91-F607-4A94-936D-F840D44486FC","1.0.9.8.4",{"Operator":148,"Negate":26,"CPEMatch":154},[155],{"Vulnerable":26,"Criteria":50,"MatchCriteriaID":156,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":26,"Negate":26,"Nodes":158},[159],{"Operator":148,"Negate":26,"CPEMatch":160},[161,163,165],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":162,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"815D70A8-47D3-459C-A32C-9FEACA0659D1",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":166,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1AFB20FA-CB00-4729-AB3A-816454C6D096",[],[],{"lastModified":11,"cacheTime":170,"version":32},1792282958778,{"score":172,"band":40,"action":173,"scoredAt":174},44,"Plan remediation","2026-10-16T06:42:59.471028+00:00"]