Lucene search
UbuntuUSN-5446-1HistoryMay 26, 2022 - 12:00 a.m.
dpkg vulnerability
2022-05-2600:00:00
ubuntu.com
43
Releases
- Ubuntu 22.04 LTS
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- dpkg - Debian package management system
Details
Max Justicz discovered that dpkg incorrectly handled unpacking certain
source packages. If a user or an automated system were tricked into
unpacking a specially crafted source package, a remote attacker could
modify files outside the target unpack directory, leading to a denial of
service or potentially gaining access to the system.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | dpkg | < 1.21.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | dpkg-dbgsym | < 1.21.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | dpkg-dev | < 1.21.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | dselect | < 1.21.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | dselect-dbgsym | < 1.21.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libdpkg-dev | < 1.21.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libdpkg-perl | < 1.21.1ubuntu2.1 | UNKNOWN |
| Ubuntu | 21.10 | noarch | dpkg | < 1.20.9ubuntu2.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | dpkg-dbgsym | < 1.20.9ubuntu2.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | dpkg-dev | < 1.20.9ubuntu2.2 | UNKNOWN |
References
Related
nessus
nessus
Debian DLA-3022-1 : dpkg - LTS security update
2022-05-26 00:00:00
EulerOS 2.0 SP8 : dpkg (EulerOS-SA-2022-2219)
2022-08-17 00:00:00
EulerOS Virtualization 3.0.2.0 : dpkg (EulerOS-SA-2023-1744)
2023-05-07 00:00:00
prion
prion
Directory traversal
2022-05-26 14:15:00
openvas
openvas
Debian: Security Advisory (DLA-3022-1)
2022-05-26 00:00:00
Mageia: Security Advisory (MGASA-2022-0327)
2022-09-19 00:00:00
Ubuntu: Security Advisory (USN-5446-1)
2022-05-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-1664
2022-05-25 00:00:00
cloudfoundry
cloudfoundry
USN-5446-1: dpkg vulnerability | Cloud Foundry
2022-07-28 00:00:00
osv
osv
CVE-2022-1664
2022-05-26 14:15:08
dpkg vulnerability
2022-05-30 15:29:17
ubuntu
ubuntu
dpkg vulnerability
2022-05-30 00:00:00
debiancve
debiancve
CVE-2022-1664
2022-05-26 14:15:00
mageia
mageia
Updated dpkg packages fix security vulnerability
2022-09-16 22:39:55
cbl_mariner
cbl_mariner
CVE-2022-1664 affecting package dpkg for versions less than 1.20.10-1
2022-07-01 20:55:27
f5
f5
K23439402 : Debian package management system vulnerability CVE-2022-1664
2022-07-08 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-1664
2022-05-26 14:15:00
alpinelinux
alpinelinux
CVE-2022-1664
2022-05-26 14:15:00
debian
debian
[SECURITY] [DSA 5147-1] dpkg security update
2022-05-25 15:31:54
veracode
veracode
Directory Traversal
2022-05-29 20:50:36
ibm
ibm
avleonov
avleonov