dpkg vulnerability

2015-11-2600:00:00

ubuntu.com

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.144 Low

EPSS

Percentile

95.7%

JSON

Releases

Ubuntu 15.10
Ubuntu 15.04
Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

dpkg - Debian package management system

Details

Hanno Boeck discovered that the dpkg-deb tool incorrectly handled certain
old style Debian binary packages. If a user or an automated system were
tricked into unpacking a specially crafted binary package, a remote
attacker could possibly use this issue to execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu15.10noarchdpkg< 1.18.2ubuntu5.1UNKNOWN
Ubuntu15.10noarchdpkg-dbgsym< 1.18.2ubuntu5.1UNKNOWN
Ubuntu15.10noarchdpkg-dev< 1.18.2ubuntu5.1UNKNOWN
Ubuntu15.10noarchdselect< 1.18.2ubuntu5.1UNKNOWN
Ubuntu15.10noarchdselect-dbgsym< 1.18.2ubuntu5.1UNKNOWN
Ubuntu15.10noarchlibdpkg-dev< 1.18.2ubuntu5.1UNKNOWN
Ubuntu15.10noarchlibdpkg-perl< 1.18.2ubuntu5.1UNKNOWN
Ubuntu15.04noarchdpkg< 1.17.25ubuntu1.1UNKNOWN
Ubuntu15.04noarchdpkg-dbgsym< 1.17.25ubuntu1.1UNKNOWN
Ubuntu15.04noarchdpkg-dev< 1.17.25ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	15.10	noarch	dpkg	< 1.18.2ubuntu5.1	UNKNOWN
Ubuntu	15.10	noarch	dpkg-dbgsym	< 1.18.2ubuntu5.1	UNKNOWN
Ubuntu	15.10	noarch	dpkg-dev	< 1.18.2ubuntu5.1	UNKNOWN
Ubuntu	15.10	noarch	dselect	< 1.18.2ubuntu5.1	UNKNOWN
Ubuntu	15.10	noarch	dselect-dbgsym	< 1.18.2ubuntu5.1	UNKNOWN
Ubuntu	15.10	noarch	libdpkg-dev	< 1.18.2ubuntu5.1	UNKNOWN
Ubuntu	15.10	noarch	libdpkg-perl	< 1.18.2ubuntu5.1	UNKNOWN
Ubuntu	15.04	noarch	dpkg	< 1.17.25ubuntu1.1	UNKNOWN
Ubuntu	15.04	noarch	dpkg-dbgsym	< 1.17.25ubuntu1.1	UNKNOWN
Ubuntu	15.04	noarch	dpkg-dev	< 1.17.25ubuntu1.1	UNKNOWN