dpkg vulnerability

2014-05-0100:00:00

ubuntu.com

6.4 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.8%

JSON

Releases

Ubuntu 14.04 ESM
Ubuntu 13.10
Ubuntu 12.10
Ubuntu 12.04
Ubuntu 10.04

Packages

dpkg - Debian package management system

Details

USN-2183-1 fixed a vulnerability in dpkg. Javier Serrano Polo discovered
that the fix introduced a vulnerability in releases with an older version
of the patch utility. This update fixes the problem.

Original advisory details:

Jakub Wilk discovered that dpkg incorrectly certain paths and symlinks when
unpacking source packages. If a user or an automated system were tricked
into unpacking a specially crafted source package, a remote attacker could
modify files outside the target unpack directory, leading to a denial of
service or potentially gaining access to the system.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlibdpkg-perl< 1.17.5ubuntu5.2UNKNOWN
Ubuntu14.04noarchdpkg< 1.17.5ubuntu5.2UNKNOWN
Ubuntu14.04noarchdselect< 1.17.5ubuntu5.2UNKNOWN
Ubuntu14.04noarchlibdpkg-dev< 1.17.5ubuntu5.2UNKNOWN
Ubuntu13.10noarchlibdpkg-perl< 1.16.12ubuntu1.2UNKNOWN
Ubuntu13.10noarchdpkg< 1.16.12ubuntu1.2UNKNOWN
Ubuntu13.10noarchdselect< 1.16.12ubuntu1.2UNKNOWN
Ubuntu13.10noarchlibdpkg-dev< 1.16.12ubuntu1.2UNKNOWN
Ubuntu12.10noarchlibdpkg-perl< 1.16.7ubuntu6.2UNKNOWN
Ubuntu12.10noarchdpkg< 1.16.7ubuntu6.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	libdpkg-perl	< 1.17.5ubuntu5.2	UNKNOWN
Ubuntu	14.04	noarch	dpkg	< 1.17.5ubuntu5.2	UNKNOWN
Ubuntu	14.04	noarch	dselect	< 1.17.5ubuntu5.2	UNKNOWN
Ubuntu	14.04	noarch	libdpkg-dev	< 1.17.5ubuntu5.2	UNKNOWN
Ubuntu	13.10	noarch	libdpkg-perl	< 1.16.12ubuntu1.2	UNKNOWN
Ubuntu	13.10	noarch	dpkg	< 1.16.12ubuntu1.2	UNKNOWN
Ubuntu	13.10	noarch	dselect	< 1.16.12ubuntu1.2	UNKNOWN
Ubuntu	13.10	noarch	libdpkg-dev	< 1.16.12ubuntu1.2	UNKNOWN
Ubuntu	12.10	noarch	libdpkg-perl	< 1.16.7ubuntu6.2	UNKNOWN
Ubuntu	12.10	noarch	dpkg	< 1.16.7ubuntu6.2	UNKNOWN