Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian dpkg 1.15.5.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-3127
dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote malicious users to conduct directory traversal atta...
Debian Dpkg 1.16.0.2Debian Dpkg 1.16.0.3Debian Dpkg 1.16.2Debian Dpkg 1.16.3Debian Dpkg 1.16.8Debian Dpkg 1.16.9Debian Dpkg 1.16.0Debian Dpkg 1.16.0.1Debian Dpkg 1.16.11Debian Dpkg 1.16.12Debian Dpkg 1.16.5Debian Dpkg 1.16.6Debian Dpkg 1.16.7Debian Dpkg 1.16.1Debian Dpkg 1.16.1.1Debian Dpkg 1.16.4Debian Dpkg 1.16.4.1Debian Dpkg 1.16.1.2Debian Dpkg 1.16.10Debian Dpkg 1.16.4.2Debian Dpkg 1.16.4.3Debian Dpkg 1.17.5
NA
CVE-2011-0402
dpkg-source in dpkg prior to 1.14.31 and 1.15.x allows user-assisted remote malicious users to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.
Debian Dpkg 1.14.16.3Debian Dpkg 1.14.16.2Debian Dpkg 1.14.21Debian Dpkg 1.14.20Debian Dpkg 1.13.9Debian Dpkg 1.13.8Debian Dpkg 1.13.15Debian Dpkg 1.13.18Debian Dpkg 1.13.24Debian Dpkg 1.13.25Debian Dpkg 1.14.6Debian Dpkg 1.14.7Debian Dpkg 1.14.8Debian Dpkg 1.13.5Debian Dpkg 1.13.4Debian Dpkg 1.10.26Debian Dpkg 1.10.25Debian Dpkg 1.14.15Debian Dpkg 1.14.14Debian Dpkg 1.14.17Debian Dpkg 1.14.16.6Debian Dpkg 1.14.26
NA
CVE-2010-1679
Directory traversal vulnerability in dpkg-source in dpkg prior to 1.14.31 and 1.15.x allows user-assisted remote malicious users to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package.
Debian Dpkg 1.14.16Debian Dpkg 1.14.15Debian Dpkg 1.14.18Debian Dpkg 1.14.17Debian Dpkg 1.14.16.6Debian Dpkg 1.14.26Debian Dpkg 1.14.23Debian Dpkg 1.13.12Debian Dpkg 1.13.11.1Debian Dpkg 1.13.19Debian Dpkg 1.13.22Debian Dpkg 1.14.2Debian Dpkg 1.14.3Debian Dpkg 1.14.10Debian Dpkg 1.14.11Debian Dpkg 1.13.1Debian Dpkg 1.13.0Debian Dpkg 1.14.14Debian Dpkg 1.14.13Debian Dpkg 1.14.16.5Debian Dpkg 1.14.22Debian Dpkg 1.14.24
NA
CVE-2014-0471
Directory traversal vulnerability in the unpacking functionality in dpkg prior to 1.15.9, 1.16.x prior to 1.16.13, and 1.17.x prior to 1.17.8 allows remote malicious users to write arbitrary files via a crafted source package, related to "C-style filename quoting."
Canonical Ubuntu Linux 10.04Debian Dpkg 1.10.11Debian Dpkg 1.10.13Debian Dpkg 1.10.19Debian Dpkg 1.10.20Debian Dpkg 1.10.25Debian Dpkg 1.10.27Debian Dpkg 1.10.8Debian Dpkg 1.13.0Debian Dpkg 1.13.14Debian Dpkg 1.13.16Debian Dpkg 1.13.20Debian Dpkg 1.13.22Debian Dpkg 1.13.6Debian Dpkg 1.13.8Debian Dpkg 1.14.13Debian Dpkg 1.14.15Debian Dpkg 1.14.16.4Debian Dpkg 1.14.16.6Debian Dpkg 1.14.22Debian Dpkg 1.14.24Debian Dpkg 1.14.30
9.8
CVSSv3
CVE-2017-8283
dpkg-source in dpkg 1.3.0 up to and including 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote malicious users to conduct directory traversal attacks via a crafted Debian source package, as...
Debian Dpkg 1.18.19Debian Dpkg 1.18.17Debian Dpkg 1.18.12Debian Dpkg 1.18.10Debian Dpkg 1.18.3Debian Dpkg 1.18.1Debian Dpkg 1.17.18Debian Dpkg 1.17.16Debian Dpkg 1.17.11Debian Dpkg 1.17.9Debian Dpkg 1.17.2Debian Dpkg 1.17.0Debian Dpkg 1.16.4.3Debian Dpkg 1.16.4.1Debian Dpkg 1.16.1.1Debian Dpkg 1.16.0.3Debian Dpkg 1.15.8.7Debian Dpkg 1.15.8.5Debian Dpkg 1.15.7.1Debian Dpkg 1.15.6.1Debian Dpkg 1.15.5.3Debian Dpkg 1.15.5.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook