Lucene search

K
freebsdFreeBSD876768AA-AB1E-11E5-8A30-5453ED2E2B49
HistoryNov 26, 2015 - 12:00 a.m.

dpkg -- stack-based buffer overflow

2015-11-2600:00:00
vuxml.freebsd.org
6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.144 Low

EPSS

Percentile

95.7%

Salvatore Bonaccorso reports:

Hanno Boeck discovered a stack-based buffer overflow in the
dpkg-deb component of dpkg, the Debian package management system.
This flaw could potentially lead to arbitrary code execution if a
user or an automated system were tricked into processing a specially
crafted Debian binary package (.deb) in the old style Debian binary
package format.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchdpkg< 1.16.17UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.144 Low

EPSS

Percentile

95.7%