Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian dpkg 1.17.22 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2017-8283
dpkg-source in dpkg 1.3.0 up to and including 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote malicious users to conduct directory traversal attacks via a crafted Debian source package, as...
Debian Dpkg 1.18.19Debian Dpkg 1.18.17Debian Dpkg 1.18.12Debian Dpkg 1.18.10Debian Dpkg 1.18.3Debian Dpkg 1.18.1Debian Dpkg 1.17.18Debian Dpkg 1.17.16Debian Dpkg 1.17.11Debian Dpkg 1.17.9Debian Dpkg 1.17.2Debian Dpkg 1.17.0Debian Dpkg 1.16.4.3Debian Dpkg 1.16.4.1Debian Dpkg 1.16.1.1Debian Dpkg 1.16.0.3Debian Dpkg 1.15.8.7Debian Dpkg 1.15.8.5Debian Dpkg 1.15.7.1Debian Dpkg 1.15.6.1Debian Dpkg 1.15.5.3Debian Dpkg 1.15.5.1
NA
CVE-2015-0860
Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x prior to 1.16.17 and 1.17.x prior to 1.17.26 allows remote malicious users to execute arbitrary code via the archive magic version number in an "old-style"...
Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 15.04Debian Dpkg 1.16.0.3Debian Dpkg 1.16.1Debian Dpkg 1.16.4Debian Dpkg 1.16.4.1Debian Dpkg 1.16.9Debian Dpkg 1.16.15Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.17.15Debian Dpkg 1.17.16Debian Dpkg 1.17.23Debian Dpkg 1.17.24Debian Dpkg 1.16.1.1Debian Dpkg 1.16.1.2Debian Dpkg 1.16.4.2Debian Dpkg 1.16.4.3Debian Dpkg 1.17.0Debian Dpkg 1.17.1
NA
CVE-2015-0840
The dpkg-source command in Debian dpkg prior to 1.16.16 and 1.17.x prior to 1.17.25 allows remote malicious users to bypass signature verification via a crafted Debian source control file (.dsc).
Debian Dpkg 1.17.1Debian Dpkg 1.17.2Debian Dpkg 1.17.5Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.17.14Debian Dpkg 1.17.15Debian Dpkg 1.17.22Debian Dpkg 1.17.23Debian DpkgDebian Dpkg 1.17.0Debian Dpkg 1.17.8Debian Dpkg 1.17.9Debian Dpkg 1.17.16Debian Dpkg 1.17.17Debian Dpkg 1.17.24Debian Dpkg 1.17.10Debian Dpkg 1.17.11Debian Dpkg 1.17.18Debian Dpkg 1.17.19Debian Dpkg 1.17.3Debian Dpkg 1.17.4
NA
CVE-2014-8625
Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg prior to 1.17.22 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package or (2) architecture...
Debian Dpkg
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook