dpkg vulnerability

2015-04-0900:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

JSON

Releases

Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04
Ubuntu 10.04

Packages

dpkg - Debian package management system

Details

Jann Horn discovered that dpkg incorrectly validated signatures when
extracting local source packages. If a user or an automated system were
tricked into unpacking a specially crafted source package, a remote
attacker could bypass signature verification checks.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchlibdpkg-perl< 1.17.13ubuntu1.1UNKNOWN
Ubuntu14.10noarchdpkg< 1.17.13ubuntu1.1UNKNOWN
Ubuntu14.10noarchdselect< 1.17.13ubuntu1.1UNKNOWN
Ubuntu14.10noarchlibdpkg-dev< 1.17.13ubuntu1.1UNKNOWN
Ubuntu14.04noarchlibdpkg-perl< 1.17.5ubuntu5.4UNKNOWN
Ubuntu14.04noarchdpkg< 1.17.5ubuntu5.4UNKNOWN
Ubuntu14.04noarchdselect< 1.17.5ubuntu5.4UNKNOWN
Ubuntu14.04noarchlibdpkg-dev< 1.17.5ubuntu5.4UNKNOWN
Ubuntu12.04noarchlibdpkg-perl< 1.16.1.2ubuntu7.6UNKNOWN
Ubuntu12.04noarchdpkg< 1.16.1.2ubuntu7.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.10	noarch	libdpkg-perl	< 1.17.13ubuntu1.1	UNKNOWN
Ubuntu	14.10	noarch	dpkg	< 1.17.13ubuntu1.1	UNKNOWN
Ubuntu	14.10	noarch	dselect	< 1.17.13ubuntu1.1	UNKNOWN
Ubuntu	14.10	noarch	libdpkg-dev	< 1.17.13ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	libdpkg-perl	< 1.17.5ubuntu5.4	UNKNOWN
Ubuntu	14.04	noarch	dpkg	< 1.17.5ubuntu5.4	UNKNOWN
Ubuntu	14.04	noarch	dselect	< 1.17.5ubuntu5.4	UNKNOWN
Ubuntu	14.04	noarch	libdpkg-dev	< 1.17.5ubuntu5.4	UNKNOWN
Ubuntu	12.04	noarch	libdpkg-perl	< 1.16.1.2ubuntu7.6	UNKNOWN
Ubuntu	12.04	noarch	dpkg	< 1.16.1.2ubuntu7.6	UNKNOWN