Published: 26/04/2017 Updated: 10/05/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

dpkg-source in dpkg 1.3.0 up to and including 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote malicious users to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian dpkg 1.18.19
debian dpkg 1.18.17
debian dpkg 1.18.12
debian dpkg 1.18.10
debian dpkg 1.18.3
debian dpkg 1.18.1
debian dpkg 1.17.18
debian dpkg 1.17.16
debian dpkg 1.17.11
debian dpkg 1.17.9
debian dpkg 1.17.2
debian dpkg 1.17.0
debian dpkg 1.16.4.3
debian dpkg 1.16.4.1
debian dpkg 1.16.1.1
debian dpkg 1.16.0.3
debian dpkg 1.15.8.7
debian dpkg 1.15.8.5
debian dpkg 1.15.7.1
debian dpkg 1.15.6.1
debian dpkg 1.15.5.3
debian dpkg 1.15.5.1
debian dpkg 1.15.1
debian dpkg 1.14.25
debian dpkg 1.14.18
debian dpkg 1.14.16.6
debian dpkg 1.14.16.1
debian dpkg 1.14.15
debian dpkg 1.14.8
debian dpkg 1.14.6
debian dpkg 1.13.25
debian dpkg 1.13.23
debian dpkg 1.13.18
debian dpkg 1.13.16
debian dpkg 1.13.10
debian dpkg 1.13.8
debian dpkg 1.13.1
debian dpkg 1.10.28
debian dpkg 1.10.23
debian dpkg 1.10.21
debian dpkg 1.10.19
debian dpkg 1.10.15
debian dpkg 1.10.13
debian dpkg 1.10.6
debian dpkg 1.10.4
debian dpkg 1.9.21
debian dpkg 1.9.19
debian dpkg 1.9.17
debian dpkg 1.9.12
debian dpkg 1.9.10
debian dpkg 1.9.1
debian dpkg 1.8.3.1
debian dpkg 1.8.0
debian dpkg 1.7.1
debian dpkg 1.6.13
debian dpkg 1.6.9
debian dpkg 1.6.7
debian dpkg 1.6
debian dpkg 1.4.1.18
debian dpkg 1.4.1.11
debian dpkg 1.4.1.9
debian dpkg 1.4.1.4
debian dpkg 1.4.1.2
debian dpkg 1.4.0.27
debian dpkg 1.4.0.26
debian dpkg 1.4.0.21
debian dpkg 1.4.0.19
debian dpkg 1.4.0.14
debian dpkg 1.4.0.12
debian dpkg 1.4.0.5
debian dpkg 1.4.0.3
debian dpkg 1.3.11
debian dpkg 1.3.9
debian dpkg 1.3.4
debian dpkg 1.3.2
debian dpkg 1.18.16
debian dpkg 1.18.15
debian dpkg 1.18.14
debian dpkg 1.18.13
debian dpkg 1.18.0
debian dpkg 1.17.23
debian dpkg 1.17.22
debian dpkg 1.17.21
debian dpkg 1.17.20
debian dpkg 1.17.7
debian dpkg 1.17.6
debian dpkg 1.17.5
debian dpkg 1.17.4
debian dpkg 1.16.4
debian dpkg 1.16.3
debian dpkg 1.16.2
debian dpkg 1.16.1.2
debian dpkg 1.15.8.3
debian dpkg 1.15.8.2
debian dpkg 1.15.8.1
debian dpkg 1.15.8
debian dpkg 1.15.4.1
debian dpkg 1.15.4
debian dpkg 1.15.3.1
debian dpkg 1.15.3
debian dpkg 1.14.16.5
debian dpkg 1.14.16.4
debian dpkg 1.14.16.3
debian dpkg 1.14.16.2
debian dpkg 1.14.4
debian dpkg 1.14.3
debian dpkg 1.14.2
debian dpkg 1.14.1
debian dpkg 1.13.14
debian dpkg 1.13.13
debian dpkg 1.13.12
debian dpkg 1.13.11.1
debian dpkg 1.13.11
debian dpkg 1.10.27
debian dpkg 1.10.26
debian dpkg 1.10.25
debian dpkg 1.10.24
debian dpkg 1.10.11
debian dpkg 1.10.10
debian dpkg 1.10.9
debian dpkg 1.10.8
debian dpkg 1.9.16
debian dpkg 1.9.15
debian dpkg 1.9.14
debian dpkg 1.9.13
debian dpkg 1.8.3
debian dpkg 1.8.2
debian dpkg 1.8.1.1
debian dpkg 1.8.1
debian dpkg 1.6.5
debian dpkg 1.6.4
debian dpkg 1.6.3
debian dpkg 1.6.2
debian dpkg 1.4.1.8
debian dpkg 1.4.1.7
debian dpkg 1.4.1.6
debian dpkg 1.4.1.5
debian dpkg 1.4.0.25
debian dpkg 1.4.0.24
debian dpkg 1.4.0.23.2
debian dpkg 1.4.0.23.1
debian dpkg 1.4.0.23
debian dpkg 1.4.0.10
debian dpkg 1.4.0.9
debian dpkg 1.4.0.8
debian dpkg 1.4.0.7
debian dpkg 1.3.8
debian dpkg 1.3.7
debian dpkg 1.3.6
debian dpkg 1.3.5
debian dpkg 1.18.23
debian dpkg 1.18.22
debian dpkg 1.18.21
debian dpkg 1.18.8
debian dpkg 1.18.7
debian dpkg 1.18.6
debian dpkg 1.18.5
debian dpkg 1.17.15
debian dpkg 1.17.14
debian dpkg 1.17.13
debian dpkg 1.17.12
debian dpkg 1.16.9
debian dpkg 1.16.8
debian dpkg 1.16.7
debian dpkg 1.16.6
debian dpkg 1.16.0.1
debian dpkg 1.16.0
debian dpkg 1.15.8.10
debian dpkg 1.15.8.9
debian dpkg 1.15.6
debian dpkg 1.15.5.6
debian dpkg 1.15.5.5
debian dpkg 1.15.5.4
debian dpkg 1.14.23
debian dpkg 1.14.22
debian dpkg 1.14.21
debian dpkg 1.14.20
debian dpkg 1.14.13
debian dpkg 1.14.12
debian dpkg 1.14.11
debian dpkg 1.14.10
debian dpkg 1.14.9
debian dpkg 1.13.22
debian dpkg 1.13.21
debian dpkg 1.13.20
debian dpkg 1.13.19
debian dpkg 1.13.6
debian dpkg 1.13.5
debian dpkg 1.13.4
debian dpkg 1.13.3
debian dpkg 1.10.18.1
debian dpkg 1.10.18
debian dpkg 1.10.17
debian dpkg 1.10.16
debian dpkg 1.10.3
debian dpkg 1.10.2
debian dpkg 1.10.1
debian dpkg 1.10
debian dpkg 1.9.8
debian dpkg 1.9.7
debian dpkg 1.9.4
debian dpkg 1.9.3
debian dpkg 1.6.12.99
debian dpkg 1.6.12
debian dpkg 1.6.11
debian dpkg 1.6.10
debian dpkg 1.4.1.17
debian dpkg 1.4.1.16
debian dpkg 1.4.1.15
debian dpkg 1.4.1.14
debian dpkg 1.4.1.13
debian dpkg 1.4.1
debian dpkg 1.4.0.31
debian dpkg 1.4.0.30
debian dpkg 1.4.0.29
debian dpkg 1.4.0.18
debian dpkg 1.4.0.17
debian dpkg 1.4.0.16
debian dpkg 1.4.0.15
debian dpkg 1.4.0.2
debian dpkg 1.4.0.1
debian dpkg 1.4.0
debian dpkg 1.3.14
debian dpkg 1.3.13
debian dpkg 1.3.0
debian dpkg 1.18.20
debian dpkg 1.18.18
debian dpkg 1.18.11
debian dpkg 1.18.9
debian dpkg 1.18.4
debian dpkg 1.18.2
debian dpkg 1.17.19
debian dpkg 1.17.17
debian dpkg 1.17.10
debian dpkg 1.17.8
debian dpkg 1.17.3
debian dpkg 1.17.1
debian dpkg 1.16.10
debian dpkg 1.16.5
debian dpkg 1.16.4.2
debian dpkg 1.16.1
debian dpkg 1.16.0.2
debian dpkg 1.15.8.8
debian dpkg 1.15.8.6
debian dpkg 1.15.8.4
debian dpkg 1.15.7.2
debian dpkg 1.15.7
debian dpkg 1.15.5.2
debian dpkg 1.15.5
debian dpkg 1.15.2
debian dpkg 1.15.0
debian dpkg 1.14.24
debian dpkg 1.14.19
debian dpkg 1.14.17
debian dpkg 1.14.16
debian dpkg 1.14.14
debian dpkg 1.14.7
debian dpkg 1.14.5
debian dpkg 1.14.0
debian dpkg 1.13.24
debian dpkg 1.13.17
debian dpkg 1.13.15
debian dpkg 1.13.9
debian dpkg 1.13.7
debian dpkg 1.13.2
debian dpkg 1.13.0
debian dpkg 1.10.22
debian dpkg 1.10.20
debian dpkg 1.10.14
debian dpkg 1.10.12
debian dpkg 1.10.7
debian dpkg 1.10.5
debian dpkg 1.9.20
debian dpkg 1.9.18
debian dpkg 1.9.11
debian dpkg 1.9.9
debian dpkg 1.9.2
debian dpkg 1.9.0
debian dpkg 1.7.2
debian dpkg 1.7.0
debian dpkg 1.6.8
debian dpkg 1.6.6
debian dpkg 1.6.1
debian dpkg 1.4.1.19
debian dpkg 1.4.1.12
debian dpkg 1.4.1.10
debian dpkg 1.4.1.3
debian dpkg 1.4.1.1
debian dpkg 1.4.0.28
debian dpkg 1.4.0.26.0.1
debian dpkg 1.4.0.22
debian dpkg 1.4.0.20
debian dpkg 1.4.0.13
debian dpkg 1.4.0.11
debian dpkg 1.4.0.6
debian dpkg 1.4.0.4
debian dpkg 1.3.12
debian dpkg 1.3.10
debian dpkg 1.3.3
debian dpkg 1.3.1

CWE-22 http://www.openwall.com/lists/oss-security/2017/04/20/2 http://www.securityfocus.com/bid/98064 https://nvd.nist.gov

Get Started

CVE-2017-8283

Vulnerability Summary

References

Vulmon Search

About

Products

Connect