debian devscripts vulnerabilities and exploits

(subscribe to this query)

debdiff.pl in devscripts 2.10.x prior to 2.10.69 and 2.11.x prior to 2.11.4 allows remote malicious users to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.

Devscripts Devel Team Devscripts 2.10.28 Devscripts Devel Team Devscripts 2.10.59 Devscripts Devel Team Devscripts 2.10.62 Devscripts Devel Team Devscripts 2.10.65.1 Devscripts Devel Team Devscripts 2.10.24 Devscripts Devel Team Devscripts 2.10.48 Devscripts Devel Team Devscripts 2.10.16 Devscripts Devel Team Devscripts 2.10.61 Devscripts Devel Team Devscripts 2.10.54 Devscripts Devel Team Devscripts 2.10.56 Devscripts Devel Team Devscripts 2.10.43 Devscripts Devel Team Devscripts 2.10.7 Devscripts Devel Team Devscripts 2.10.8 Devscripts Devel Team Devscripts 2.10.64 Devscripts Devel Team Devscripts 2.10.46 Devscripts Devel Team Devscripts 2.10.55 Devscripts Devel Team Devscripts 2.10.50 Devscripts Devel Team Devscripts 2.10.34 Devscripts Devel Team Devscripts 2.10.49 Devscripts Devel Team Devscripts 2.10.36 Devscripts Devel Team Devscripts 2.10.12 Devscripts Devel Team Devscripts 2.10.1

debdiff.pl in devscripts 2.10.x prior to 2.10.69 and 2.11.x prior to 2.11.4 allows remote malicious users to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.

Devscripts Devel Team Devscripts 2.10.28 Devscripts Devel Team Devscripts 2.10.59 Devscripts Devel Team Devscripts 2.10.62 Devscripts Devel Team Devscripts 2.10.65.1 Devscripts Devel Team Devscripts 2.10.24 Devscripts Devel Team Devscripts 2.10.48 Devscripts Devel Team Devscripts 2.10.16 Devscripts Devel Team Devscripts 2.10.61 Devscripts Devel Team Devscripts 2.10.54 Devscripts Devel Team Devscripts 2.10.56 Devscripts Devel Team Devscripts 2.10.43 Devscripts Devel Team Devscripts 2.10.7 Devscripts Devel Team Devscripts 2.10.8 Devscripts Devel Team Devscripts 2.10.64 Devscripts Devel Team Devscripts 2.10.46 Devscripts Devel Team Devscripts 2.10.55 Devscripts Devel Team Devscripts 2.10.50 Devscripts Devel Team Devscripts 2.10.34 Devscripts Devel Team Devscripts 2.10.49 Devscripts Devel Team Devscripts 2.10.36 Devscripts Devel Team Devscripts 2.10.12 Devscripts Devel Team Devscripts 2.10.1

scripts/dscverify.pl in devscripts prior to 2.12.3 allows remote malicious users to execute arbitrary commands via unspecified vectors related to "arguments to external commands."

Devscripts Devel Team Devscripts 2.11.6 Devscripts Devel Team Devscripts 2.9.26 Devscripts Devel Team Devscripts 2.10.28 Devscripts Devel Team Devscripts 2.10.59 Devscripts Devel Team Devscripts 2.10.62 Devscripts Devel Team Devscripts 2.10.65.1 Devscripts Devel Team Devscripts 2.10.24 Devscripts Devel Team Devscripts 2.10.48 Devscripts Devel Team Devscripts 2.10.16 Devscripts Devel Team Devscripts 2.10.61 Devscripts Devel Team Devscripts 2.10.54 Devscripts Devel Team Devscripts 2.9.27 Devscripts Devel Team Devscripts 2.9.23 Devscripts Devel Team Devscripts 2.11.2 Devscripts Devel Team Devscripts 2.10.56 Devscripts Devel Team Devscripts 2.11.9 Devscripts Devel Team Devscripts 2.9.21 Devscripts Devel Team Devscripts 2.10.43 Devscripts Devel Team Devscripts 2.10.7 Devscripts Devel Team Devscripts 2.10.8 Devscripts Devel Team Devscripts 2.12.0 Devscripts Devel Team Devscripts 2.10.64

scripts/dget.pl in devscripts prior to 2.12.3 allows remote malicious users to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

Devscripts Devel Team Devscripts 2.11.6 Devscripts Devel Team Devscripts 2.9.26 Devscripts Devel Team Devscripts 2.10.28 Devscripts Devel Team Devscripts 2.10.59 Devscripts Devel Team Devscripts 2.10.62 Devscripts Devel Team Devscripts 2.10.65.1 Devscripts Devel Team Devscripts 2.10.24 Devscripts Devel Team Devscripts 2.10.48 Devscripts Devel Team Devscripts 2.10.16 Devscripts Devel Team Devscripts 2.10.61 Devscripts Devel Team Devscripts 2.10.54 Devscripts Devel Team Devscripts 2.9.27 Devscripts Devel Team Devscripts 2.9.23 Devscripts Devel Team Devscripts 2.11.2 Devscripts Devel Team Devscripts 2.10.56 Devscripts Devel Team Devscripts 2.11.9 Devscripts Devel Team Devscripts 2.9.21 Devscripts Devel Team Devscripts 2.10.43 Devscripts Devel Team Devscripts 2.10.7 Devscripts Devel Team Devscripts 2.10.8 Devscripts Devel Team Devscripts 2.12.0 Devscripts Devel Team Devscripts 2.10.64

debdiff.pl in devscripts 2.10.x prior to 2.10.69 and 2.11.x prior to 2.11.4 allows remote malicious users to execute arbitrary code via shell metacharacters in the file name argument.

Devscripts Devel Team Devscripts 2.10.28 Devscripts Devel Team Devscripts 2.10.59 Devscripts Devel Team Devscripts 2.10.62 Devscripts Devel Team Devscripts 2.10.65.1 Devscripts Devel Team Devscripts 2.10.24 Devscripts Devel Team Devscripts 2.10.48 Devscripts Devel Team Devscripts 2.10.16 Devscripts Devel Team Devscripts 2.10.61 Devscripts Devel Team Devscripts 2.10.54 Devscripts Devel Team Devscripts 2.10.56 Devscripts Devel Team Devscripts 2.10.43 Devscripts Devel Team Devscripts 2.10.7 Devscripts Devel Team Devscripts 2.10.8 Devscripts Devel Team Devscripts 2.10.64 Devscripts Devel Team Devscripts 2.10.46 Devscripts Devel Team Devscripts 2.10.55 Devscripts Devel Team Devscripts 2.10.50 Devscripts Devel Team Devscripts 2.10.34 Devscripts Devel Team Devscripts 2.10.49 Devscripts Devel Team Devscripts 2.10.36 Devscripts Devel Team Devscripts 2.10.12 Devscripts Devel Team Devscripts 2.10.1

scripts/dget.pl in devscripts prior to 2.10.73 allows remote malicious users to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-224...

Devscripts Devel Team Devscripts 2.10.28 Devscripts Devel Team Devscripts 2.10.59 Devscripts Devel Team Devscripts 2.10.62 Devscripts Devel Team Devscripts 2.10.65.1 Devscripts Devel Team Devscripts 2.10.24 Devscripts Devel Team Devscripts 2.10.48 Devscripts Devel Team Devscripts 2.10.16 Devscripts Devel Team Devscripts 2.10.61 Devscripts Devel Team Devscripts 2.10.54 Devscripts Devel Team Devscripts 2.10.56 Devscripts Devel Team Devscripts 2.10.69 Devscripts Devel Team Devscripts 2.10.43 Devscripts Devel Team Devscripts 2.10.7 Devscripts Devel Team Devscripts 2.10.8 Devscripts Devel Team Devscripts Devscripts Devel Team Devscripts 2.10.64 Devscripts Devel Team Devscripts 2.10.46 Devscripts Devel Team Devscripts 2.10.55 Devscripts Devel Team Devscripts 2.10.50 Devscripts Devel Team Devscripts 2.10.34 Devscripts Devel Team Devscripts 2.10.70 Devscripts Devel Team Devscripts 2.10.49

scripts/annotate-output.sh in devscripts prior to 2.12.2, as used in rpmdevtools prior to 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.

Devscripts Devel Team Devscripts Devscripts Devel Team Devscripts 2.12.0

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote malicious users to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

Devscripts Devel Team Devscripts

scripts/grep-excuses.pl in Debian devscripts up to and including 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.

Debian Devscripts Canonical Ubuntu Linux 17.10 Canonical Ubuntu Linux 18.04

An issue exists in uscan in devscripts prior to 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball.

Debian Devscripts Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook