dpkg vulnerabilities

2014-06-1000:00:00

ubuntu.com

101

6.6 Medium

AI Score

Confidence

Low

0.159 Low

EPSS

Percentile

96.0%

JSON

Releases

Ubuntu 14.04 ESM
Ubuntu 13.10
Ubuntu 12.04
Ubuntu 10.04

Packages

dpkg - Debian package management system

Details

It was discovered that dpkg incorrectly handled certain patches when
unpacking source packages. If a user or an automated system were tricked
into unpacking a specially crafted source package, a remote attacker could
modify files outside the target unpack directory, leading to a denial of
service or potentially gaining access to the system.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlibdpkg-perl< 1.17.5ubuntu5.3UNKNOWN
Ubuntu14.04noarchdpkg< 1.17.5ubuntu5.3UNKNOWN
Ubuntu14.04noarchdselect< 1.17.5ubuntu5.3UNKNOWN
Ubuntu14.04noarchlibdpkg-dev< 1.17.5ubuntu5.3UNKNOWN
Ubuntu13.10noarchlibdpkg-perl< 1.16.12ubuntu1.3UNKNOWN
Ubuntu13.10noarchdpkg< 1.16.12ubuntu1.3UNKNOWN
Ubuntu13.10noarchdselect< 1.16.12ubuntu1.3UNKNOWN
Ubuntu13.10noarchlibdpkg-dev< 1.16.12ubuntu1.3UNKNOWN
Ubuntu12.04noarchlibdpkg-perl< 1.16.1.2ubuntu7.5UNKNOWN
Ubuntu12.04noarchdpkg< 1.16.1.2ubuntu7.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	libdpkg-perl	< 1.17.5ubuntu5.3	UNKNOWN
Ubuntu	14.04	noarch	dpkg	< 1.17.5ubuntu5.3	UNKNOWN
Ubuntu	14.04	noarch	dselect	< 1.17.5ubuntu5.3	UNKNOWN
Ubuntu	14.04	noarch	libdpkg-dev	< 1.17.5ubuntu5.3	UNKNOWN
Ubuntu	13.10	noarch	libdpkg-perl	< 1.16.12ubuntu1.3	UNKNOWN
Ubuntu	13.10	noarch	dpkg	< 1.16.12ubuntu1.3	UNKNOWN
Ubuntu	13.10	noarch	dselect	< 1.16.12ubuntu1.3	UNKNOWN
Ubuntu	13.10	noarch	libdpkg-dev	< 1.16.12ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	libdpkg-perl	< 1.16.1.2ubuntu7.5	UNKNOWN
Ubuntu	12.04	noarch	dpkg	< 1.16.1.2ubuntu7.5	UNKNOWN