Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

debian dpkg 1.17.20 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2017-8283

dpkg-source in dpkg 1.3.0 up to and including 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote malicious users to conduct directory traversal attacks via a crafted Debian source package, as...
Debian Dpkg 1.18.23Debian Dpkg 1.10.5Debian Dpkg 1.6.13Debian Dpkg 1.4.0.28Debian Dpkg 1.15.5.5Debian Dpkg 1.13.20Debian Dpkg 1.4.0.6Debian Dpkg 1.10.6Debian Dpkg 1.18.0Debian Dpkg 1.18.6Debian Dpkg 1.15.8.4Debian Dpkg 1.18.15Debian Dpkg 1.14.4Debian Dpkg 1.4.1.10Debian Dpkg 1.9.10Debian Dpkg 1.14.12Debian Dpkg 1.15.5.2Debian Dpkg 1.9.20Debian Dpkg 1.17.14Debian Dpkg 1.3.6Debian Dpkg 1.13.9Debian Dpkg 1.15.3.1
NA

CVE-2015-0860

Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x prior to 1.16.17 and 1.17.x prior to 1.17.26 allows remote malicious users to execute arbitrary code via the archive magic version number in an "old-style"...
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Debian Dpkg 1.17.14Debian Dpkg 1.17.24Debian Dpkg 1.16.0Debian Dpkg 1.17.3Debian Dpkg 1.17.11Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.16.4.2Debian Dpkg 1.16.4Debian Dpkg 1.16.1.1Debian Dpkg 1.16.5Debian Dpkg 1.17.22Debian Dpkg 1.17.18Debian Dpkg 1.17.1Debian Dpkg 1.16.11Debian Dpkg 1.16.2Debian Dpkg 1.16.1Debian Dpkg 1.17.19
NA

CVE-2015-0840

The dpkg-source command in Debian dpkg prior to 1.16.16 and 1.17.x prior to 1.17.25 allows remote malicious users to bypass signature verification via a crafted Debian source control file (.dsc).
Debian Dpkg 1.17.14Debian Dpkg 1.17.24Debian Dpkg 1.17.3Debian Dpkg 1.17.11Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.17.22Debian Dpkg 1.17.18Debian Dpkg 1.17.1Debian Dpkg 1.17.19Debian Dpkg 1.17.23Debian Dpkg 1.17.8Debian Dpkg 1.17.13Debian Dpkg 1.17.4Debian Dpkg 1.17.21Debian Dpkg 1.17.17Debian Dpkg 1.17.9Debian Dpkg 1.17.15Debian Dpkg 1.17.20Debian Dpkg 1.17.10Debian Dpkg 1.17.12Debian Dpkg 1.17.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook