CVE:CVE-2020-3810
CNNVD:CNNVD-202005-778
Debian github apt是Debian合作组织的一个命令行软件包管理器，它提供搜索、管理和查询软件包信息功能。
apt 2.1.2之前版本中的ar/tar实现存在缓冲区错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade debian apt to a higher version than 2.1.2,and avoid the version (,2.1.2); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.10,20.04,and avoid the version 12.04,14.04,16.04,18.04,19.10,20.04