Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian dpkg 1.17.4 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2017-8283
dpkg-source in dpkg 1.3.0 up to and including 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote malicious users to conduct directory traversal attacks via a crafted Debian source package, as...
Debian Dpkg 1.18.19Debian Dpkg 1.18.17Debian Dpkg 1.18.12Debian Dpkg 1.18.10Debian Dpkg 1.18.3Debian Dpkg 1.18.1Debian Dpkg 1.17.18Debian Dpkg 1.17.16Debian Dpkg 1.17.11Debian Dpkg 1.17.9Debian Dpkg 1.17.2Debian Dpkg 1.17.0Debian Dpkg 1.16.4.3Debian Dpkg 1.16.4.1Debian Dpkg 1.16.1.1Debian Dpkg 1.16.0.3Debian Dpkg 1.15.8.7Debian Dpkg 1.15.8.5Debian Dpkg 1.15.7.1Debian Dpkg 1.15.6.1Debian Dpkg 1.15.5.3Debian Dpkg 1.15.5.1
NA
CVE-2015-0860
Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x prior to 1.16.17 and 1.17.x prior to 1.17.26 allows remote malicious users to execute arbitrary code via the archive magic version number in an "old-style"...
Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 15.04Debian Dpkg 1.16.0.3Debian Dpkg 1.16.1Debian Dpkg 1.16.4Debian Dpkg 1.16.4.1Debian Dpkg 1.16.9Debian Dpkg 1.16.15Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.17.15Debian Dpkg 1.17.16Debian Dpkg 1.17.23Debian Dpkg 1.17.24Debian Dpkg 1.16.1.1Debian Dpkg 1.16.1.2Debian Dpkg 1.16.4.2Debian Dpkg 1.16.4.3Debian Dpkg 1.17.0Debian Dpkg 1.17.1
NA
CVE-2015-0840
The dpkg-source command in Debian dpkg prior to 1.16.16 and 1.17.x prior to 1.17.25 allows remote malicious users to bypass signature verification via a crafted Debian source control file (.dsc).
Debian Dpkg 1.17.1Debian Dpkg 1.17.2Debian Dpkg 1.17.5Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.17.14Debian Dpkg 1.17.15Debian Dpkg 1.17.22Debian Dpkg 1.17.23Debian DpkgDebian Dpkg 1.17.0Debian Dpkg 1.17.8Debian Dpkg 1.17.9Debian Dpkg 1.17.16Debian Dpkg 1.17.17Debian Dpkg 1.17.24Debian Dpkg 1.17.10Debian Dpkg 1.17.11Debian Dpkg 1.17.18Debian Dpkg 1.17.19Debian Dpkg 1.17.3Debian Dpkg 1.17.4
NA
CVE-2014-3227
dpkg 1.15.9, 1.16.x prior to 1.16.14, and 1.17.x prior to 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature, but is supported in environments with noncompliant patch programs, which triggers an interaction error that...
Debian Dpkg 1.16.0.1Debian Dpkg 1.16.0.2Debian Dpkg 1.16.0.3Debian Dpkg 1.16.1Debian Dpkg 1.16.7Debian Dpkg 1.16.8Debian Dpkg 1.16.9Debian Dpkg 1.17.0Debian Dpkg 1.16.12Debian Dpkg 1.16.2Debian Dpkg 1.16.3Debian Dpkg 1.16.4Debian Dpkg 1.16.4.1Debian Dpkg 1.17.5Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.17.8Debian Dpkg 1.15.9Debian Dpkg 1.16.1.2Debian Dpkg 1.16.11Debian Dpkg 1.16.4.3Debian Dpkg 1.16.6
NA
CVE-2014-3127
dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote malicious users to conduct directory traversal atta...
Debian Dpkg 1.16.0.2Debian Dpkg 1.16.0.3Debian Dpkg 1.16.2Debian Dpkg 1.16.3Debian Dpkg 1.16.8Debian Dpkg 1.16.9Debian Dpkg 1.16.0Debian Dpkg 1.16.0.1Debian Dpkg 1.16.11Debian Dpkg 1.16.12Debian Dpkg 1.16.5Debian Dpkg 1.16.6Debian Dpkg 1.16.7Debian Dpkg 1.16.1Debian Dpkg 1.16.1.1Debian Dpkg 1.16.4Debian Dpkg 1.16.4.1Debian Dpkg 1.16.1.2Debian Dpkg 1.16.10Debian Dpkg 1.16.4.2Debian Dpkg 1.16.4.3Debian Dpkg 1.17.5
NA
CVE-2014-0471
Directory traversal vulnerability in the unpacking functionality in dpkg prior to 1.15.9, 1.16.x prior to 1.16.13, and 1.17.x prior to 1.17.8 allows remote malicious users to write arbitrary files via a crafted source package, related to "C-style filename quoting."
Canonical Ubuntu Linux 10.04Debian Dpkg 1.10.11Debian Dpkg 1.10.13Debian Dpkg 1.10.19Debian Dpkg 1.10.20Debian Dpkg 1.10.25Debian Dpkg 1.10.27Debian Dpkg 1.10.8Debian Dpkg 1.13.0Debian Dpkg 1.13.14Debian Dpkg 1.13.16Debian Dpkg 1.13.20Debian Dpkg 1.13.22Debian Dpkg 1.13.6Debian Dpkg 1.13.8Debian Dpkg 1.14.13Debian Dpkg 1.14.15Debian Dpkg 1.14.16.4Debian Dpkg 1.14.16.6Debian Dpkg 1.14.22Debian Dpkg 1.14.24Debian Dpkg 1.14.30
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook