CVE-2019-3462 on Ubuntu 16.04 LTS (xenial) - high.
Description:
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.