3 ms·

You cannot MITM a .rpm downloaded with yum/dnf or a .deb downloaded with apt because they verify the signature of the package as a whole before they even begin

You cannot MITM a .rpm downloaded with yum/dnf or a .deb downloaded with apt because they verify the signature of the package as a whole before they even begin unpacking it, the entire reason a RCE exists here at all is because of an entirely broken signature verification mechanism. There is no need to protect against a MITM attack if you are verifying signatures correctly, because a modified package will be detected prior to installation.

angry_octet 8y ago
Of course you can mitm it. You can supply old manifests and packages. You can send specially crafted rpms/debs that trigger bugs. Resource exhaustion via enormous packages is an option for embedded systems.
nebulous1 8y ago
"the only reason this RCE exists is because of a vulnerability in apk" The problem with this thinking is that it's always true, yet vulnerabilities keep on being discovered.