VULNERABILITY INTELLIGENCE
CVE-2009-1300
CVSS score10 HIGH
EPSS probability1.86%
CISA KEVNot currently listed
Published2009-04-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
Weakness classification
- CWE-20: Improper Input Validation