CVE-2022-1664

2022-05-2500:00:00

ubuntu.com

0.009 Low

EPSS

Percentile

82.3%

JSON

Dpkg::Source::Archive in dpkg, the Debian package management system, before
version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal
vulnerability. When extracting untrusted source packages in v2 and v3
source package formats that include a debian.tar, the in-place extraction
can lead to directory traversal situations on specially crafted orig.tar
and debian.tar tarballs.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchdpkg< 1.19.0.5ubuntu2.4UNKNOWN
ubuntu20.04noarchdpkg< 1.19.7ubuntu3.2UNKNOWN
ubuntu21.10noarchdpkg< 1.20.9ubuntu2.2UNKNOWN
ubuntu22.04noarchdpkg< 1.21.1ubuntu2.1UNKNOWN
ubuntu22.10noarchdpkg< 1.21.9ubuntu1UNKNOWN
ubuntu23.04noarchdpkg< 1.21.9ubuntu1UNKNOWN
ubuntu23.10noarchdpkg< 1.21.9ubuntu1UNKNOWN
ubuntu24.04noarchdpkg< 1.21.9ubuntu1UNKNOWN
ubuntu14.04noarchdpkg< anyUNKNOWN
ubuntu16.04noarchdpkg< 1.18.4ubuntu1.7+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	dpkg	< 1.19.0.5ubuntu2.4	UNKNOWN
ubuntu	20.04	noarch	dpkg	< 1.19.7ubuntu3.2	UNKNOWN
ubuntu	21.10	noarch	dpkg	< 1.20.9ubuntu2.2	UNKNOWN
ubuntu	22.04	noarch	dpkg	< 1.21.1ubuntu2.1	UNKNOWN
ubuntu	22.10	noarch	dpkg	< 1.21.9ubuntu1	UNKNOWN
ubuntu	23.04	noarch	dpkg	< 1.21.9ubuntu1	UNKNOWN
ubuntu	23.10	noarch	dpkg	< 1.21.9ubuntu1	UNKNOWN
ubuntu	24.04	noarch	dpkg	< 1.21.9ubuntu1	UNKNOWN
ubuntu	14.04	noarch	dpkg	< any	UNKNOWN
ubuntu	16.04	noarch	dpkg	< 1.18.4ubuntu1.7+esm1	UNKNOWN