Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

debian dpkg 1.15.5.5 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2

CVE-2017-8283

dpkg-source in dpkg 1.3.0 up to and including 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote malicious users to conduct directory traversal attacks via a crafted Debian source package, as...
Debian Dpkg 1.18.23Debian Dpkg 1.10.5Debian Dpkg 1.6.13Debian Dpkg 1.4.0.28Debian Dpkg 1.15.5.5Debian Dpkg 1.13.20Debian Dpkg 1.4.0.6Debian Dpkg 1.10.6Debian Dpkg 1.18.0Debian Dpkg 1.18.6Debian Dpkg 1.15.8.4Debian Dpkg 1.18.15Debian Dpkg 1.14.4Debian Dpkg 1.4.1.10Debian Dpkg 1.9.10Debian Dpkg 1.14.12Debian Dpkg 1.15.5.2Debian Dpkg 1.9.20Debian Dpkg 1.17.14Debian Dpkg 1.3.6Debian Dpkg 1.13.9Debian Dpkg 1.15.3.1
7.1
CVSSv2

CVE-2014-3127

dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote malicious users to conduct directory traversal atta...
Debian Dpkg 1.16.0Debian Dpkg 1.16.4.2Debian Dpkg 1.16.4Debian Dpkg 1.16.1.1Debian Dpkg 1.16.5Debian Dpkg 1.16.11Debian Dpkg 1.16.2Debian Dpkg 1.16.1Debian Dpkg 1.16.8Debian Dpkg 1.16.6Debian Dpkg 1.16.0.3Debian Dpkg 1.16.12Debian Dpkg 1.16.4.1Debian Dpkg 1.16.3Debian Dpkg 1.16.1.2Debian Dpkg 1.16.7Debian Dpkg 1.16.9Debian Dpkg 1.16.10Debian Dpkg 1.16.0.2Debian Dpkg 1.16.0.1Debian Dpkg 1.16.4.3Debian Dpkg 1.17.3
5
CVSSv2

CVE-2014-0471

Directory traversal vulnerability in the unpacking functionality in dpkg prior to 1.15.9, 1.16.x prior to 1.16.13, and 1.17.x prior to 1.17.8 allows remote malicious users to write arbitrary files via a crafted source package, related to "C-style filename quoting."
Debian Dpkg 1.10.5Debian Dpkg 1.15.5.5Debian Dpkg 1.13.20Debian Dpkg 1.10.6Debian Dpkg 1.15.8.4Debian Dpkg 1.14.4Debian Dpkg 1.9.10Debian Dpkg 1.14.12Debian Dpkg 1.15.5.2Debian Dpkg 1.9.20Debian Dpkg 1.13.9Debian Dpkg 1.15.3.1Debian Dpkg 1.14.23Debian Dpkg 1.14.16.6Debian Dpkg 1.15.4.1Debian Dpkg 1.13.11Debian Dpkg 1.16.0Debian Dpkg 1.14.18Debian Dpkg 1.17.3Debian Dpkg 1.9.12Debian Dpkg 1.14.21Debian Dpkg 1.9.13
6.8
CVSSv2

CVE-2010-1679

Directory traversal vulnerability in dpkg-source in dpkg prior to 1.14.31 and 1.15.x allows user-assisted remote malicious users to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package.
Debian Dpkg 1.10.5Debian Dpkg 1.13.20Debian Dpkg 1.10.6Debian Dpkg 1.14.4Debian Dpkg 1.14.12Debian Dpkg 1.9.20Debian Dpkg 1.13.9Debian Dpkg 1.14.23Debian Dpkg 1.14.16.6Debian Dpkg 1.13.11Debian Dpkg 1.14.18Debian Dpkg 1.14.21Debian Dpkg 1.10Debian Dpkg 1.10.15Debian Dpkg 1.14.16.4Debian Dpkg 1.10.1Debian Dpkg 1.13.12Debian Dpkg 1.10.4Debian Dpkg 1.10.23Debian Dpkg 1.14.7Debian Dpkg 1.10.8Debian Dpkg 1.10.18.1
6.8
CVSSv2

CVE-2011-0402

dpkg-source in dpkg prior to 1.14.31 and 1.15.x allows user-assisted remote malicious users to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.
Debian Dpkg 1.10.5Debian Dpkg 1.13.20Debian Dpkg 1.10.6Debian Dpkg 1.14.4Debian Dpkg 1.14.12Debian Dpkg 1.9.20Debian Dpkg 1.13.9Debian Dpkg 1.14.23Debian Dpkg 1.14.16.6Debian Dpkg 1.13.11Debian Dpkg 1.14.18Debian Dpkg 1.14.21Debian Dpkg 1.10Debian Dpkg 1.10.15Debian Dpkg 1.14.16.4Debian Dpkg 1.10.1Debian Dpkg 1.13.12Debian Dpkg 1.10.4Debian Dpkg 1.10.23Debian Dpkg 1.14.7Debian Dpkg 1.10.8Debian Dpkg 1.10.18.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook