Search for packages
| purl | pkg:deb/debian/dpkg@1.17.10 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bace-jatv-aaac
Aliases: CVE-2015-0860 |
Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow. |
Affected by 3 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-eenk-p5sk-aaac
Aliases: CVE-2015-0840 |
The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc). |
Affected by 3 other vulnerabilities. |
|
VCID-hy4s-c76f-aaak
Aliases: CVE-2022-1664 |
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-v1fh-mtmc-aaab
Aliases: CVE-2017-8283 |
dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD. |
Affected by 1 other vulnerability. |
|
VCID-v83g-rs1y-aaaq
Aliases: CVE-2014-8625 |
Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package or (2) architecture name. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-77vt-eqpa-aaaf | dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature, but is supported in environments with noncompliant patch programs, which triggers an interaction error that allows remote attackers to conduct directory traversal attacks and modify files outside of the intended directories via a crafted source package. NOTE: this vulnerability exists because of reliance on unrealistic constraints on the behavior of an external program. |
CVE-2014-3227
|
| VCID-bka4-khw1-aaae | Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting." |
CVE-2014-0471
|
| VCID-c9es-6hs2-aaah | dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote attackers to conduct directory traversal attacks and modify files outside of the intended directories via a crafted source package. NOTE: this can be considered a release engineering problem in the effort to fix CVE-2014-0471. |
CVE-2014-3127
|
| VCID-kf6s-2qxb-aaah | Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pseudo-header in conjunction with (1) missing --- and +++ header lines or (2) a +++ header line with a blank pathname. |
CVE-2014-3865
|
| VCID-kmuh-62us-aaas | Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header line. |
CVE-2014-3864
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T16:50:32.507621+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:24:43.218052+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:55:29.608556+00:00 | Debian Oval Importer | Affected by | VCID-hy4s-c76f-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:40:00.679838+00:00 | Debian Oval Importer | Fixing | VCID-bka4-khw1-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:43:22.993999+00:00 | Debian Oval Importer | Fixing | VCID-77vt-eqpa-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:42:24.825203+00:00 | Debian Oval Importer | Affected by | VCID-v83g-rs1y-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:32:08.266741+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:29:05.610193+00:00 | Debian Oval Importer | Fixing | VCID-kmuh-62us-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:16:42.000633+00:00 | Debian Oval Importer | Affected by | VCID-eenk-p5sk-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T12:30:28.451766+00:00 | Debian Oval Importer | Affected by | VCID-v1fh-mtmc-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T09:36:02.838866+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T01:19:01.533636+00:00 | Debian Oval Importer | Affected by | VCID-hy4s-c76f-aaak | None | 36.1.3 |
| 2025-06-21T00:49:54.816308+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | None | 36.1.3 |
| 2025-06-20T23:32:07.744941+00:00 | Debian Oval Importer | Fixing | VCID-77vt-eqpa-aaaf | None | 36.1.3 |
| 2025-06-20T22:05:52.033673+00:00 | Debian Oval Importer | Affected by | VCID-v83g-rs1y-aaaq | None | 36.1.3 |
| 2025-06-20T21:28:45.006727+00:00 | Debian Oval Importer | Affected by | VCID-v1fh-mtmc-aaab | None | 36.1.3 |
| 2025-06-20T21:12:06.680543+00:00 | Debian Oval Importer | Affected by | VCID-eenk-p5sk-aaac | None | 36.1.3 |
| 2025-06-20T20:50:33.781421+00:00 | Debian Oval Importer | Fixing | VCID-bka4-khw1-aaae | None | 36.1.3 |
| 2025-06-20T20:47:36.006355+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | None | 36.1.3 |
| 2025-06-20T20:46:57.053753+00:00 | Debian Oval Importer | Fixing | VCID-kmuh-62us-aaas | None | 36.1.3 |
| 2025-06-20T19:50:15.793798+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | None | 36.1.3 |
| 2025-06-08T12:37:33.674608+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T12:32:15.552742+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T09:35:42.988998+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:19:14.509132+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:48:58.011792+00:00 | Debian Oval Importer | Affected by | VCID-hy4s-c76f-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:33:12.006569+00:00 | Debian Oval Importer | Fixing | VCID-bka4-khw1-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:37:34.125098+00:00 | Debian Oval Importer | Fixing | VCID-77vt-eqpa-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:36:37.666670+00:00 | Debian Oval Importer | Affected by | VCID-v83g-rs1y-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:26:10.964971+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:23:06.256562+00:00 | Debian Oval Importer | Fixing | VCID-kmuh-62us-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:11:20.788227+00:00 | Debian Oval Importer | Affected by | VCID-eenk-p5sk-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T05:29:55.673131+00:00 | Debian Oval Importer | Affected by | VCID-v1fh-mtmc-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T03:24:38.968295+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-07T18:41:47.453702+00:00 | Debian Oval Importer | Affected by | VCID-hy4s-c76f-aaak | None | 36.1.0 |
| 2025-06-07T18:12:16.730305+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | None | 36.1.0 |
| 2025-06-07T16:55:02.968079+00:00 | Debian Oval Importer | Fixing | VCID-77vt-eqpa-aaaf | None | 36.1.0 |
| 2025-06-07T15:29:43.768566+00:00 | Debian Oval Importer | Affected by | VCID-v83g-rs1y-aaaq | None | 36.1.0 |
| 2025-06-07T14:51:24.989276+00:00 | Debian Oval Importer | Affected by | VCID-v1fh-mtmc-aaab | None | 36.1.0 |
| 2025-06-07T14:36:44.728688+00:00 | Debian Oval Importer | Affected by | VCID-eenk-p5sk-aaac | None | 36.1.0 |
| 2025-06-07T14:21:33.181818+00:00 | Debian Oval Importer | Fixing | VCID-bka4-khw1-aaae | None | 36.1.0 |
| 2025-06-07T14:19:03.594753+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | None | 36.1.0 |
| 2025-06-07T14:18:42.274284+00:00 | Debian Oval Importer | Fixing | VCID-kmuh-62us-aaas | None | 36.1.0 |
| 2025-06-07T13:41:45.919155+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | None | 36.1.0 |
| 2025-04-12T22:34:05.192335+00:00 | Debian Oval Importer | Fixing | VCID-bka4-khw1-aaae | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T22:12:14.457431+00:00 | Debian Oval Importer | Affected by | VCID-eenk-p5sk-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T22:08:11.920344+00:00 | Debian Oval Importer | Affected by | VCID-hy4s-c76f-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:56:21.376891+00:00 | Debian Oval Importer | Fixing | VCID-kmuh-62us-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:42:52.936376+00:00 | Debian Oval Importer | Affected by | VCID-v83g-rs1y-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T20:43:07.580144+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:50:25.665319+00:00 | Debian Oval Importer | Affected by | VCID-v1fh-mtmc-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:31:34.561352+00:00 | Debian Oval Importer | Fixing | VCID-77vt-eqpa-aaaf | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:24:10.155433+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:18:40.883317+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T08:08:05.329323+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:50:36.916070+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:21:24.560242+00:00 | Debian Oval Importer | Affected by | VCID-hy4s-c76f-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:05:55.660964+00:00 | Debian Oval Importer | Fixing | VCID-bka4-khw1-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:09:58.061916+00:00 | Debian Oval Importer | Fixing | VCID-77vt-eqpa-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:08:58.373489+00:00 | Debian Oval Importer | Affected by | VCID-v83g-rs1y-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:58:29.535287+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:55:22.196410+00:00 | Debian Oval Importer | Fixing | VCID-kmuh-62us-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:43:25.523614+00:00 | Debian Oval Importer | Affected by | VCID-eenk-p5sk-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:01:11.821616+00:00 | Debian Oval Importer | Affected by | VCID-v1fh-mtmc-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T01:52:02.332772+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-07T17:19:35.779172+00:00 | Debian Oval Importer | Affected by | VCID-hy4s-c76f-aaak | None | 36.0.0 |
| 2025-04-07T16:49:37.805016+00:00 | Debian Oval Importer | Fixing | VCID-kf6s-2qxb-aaah | None | 36.0.0 |
| 2025-04-07T15:28:02.834890+00:00 | Debian Oval Importer | Fixing | VCID-77vt-eqpa-aaaf | None | 36.0.0 |
| 2025-04-07T14:00:48.179776+00:00 | Debian Oval Importer | Affected by | VCID-v83g-rs1y-aaaq | None | 36.0.0 |
| 2025-04-07T13:23:25.212184+00:00 | Debian Oval Importer | Affected by | VCID-v1fh-mtmc-aaab | None | 36.0.0 |
| 2025-04-07T13:08:52.932075+00:00 | Debian Oval Importer | Affected by | VCID-eenk-p5sk-aaac | None | 36.0.0 |
| 2025-04-07T12:54:13.233216+00:00 | Debian Oval Importer | Fixing | VCID-bka4-khw1-aaae | None | 36.0.0 |
| 2025-04-07T12:51:48.333252+00:00 | Debian Oval Importer | Fixing | VCID-c9es-6hs2-aaah | None | 36.0.0 |
| 2025-04-07T12:51:26.126185+00:00 | Debian Oval Importer | Fixing | VCID-kmuh-62us-aaas | None | 36.0.0 |
| 2025-04-07T12:17:04.446569+00:00 | Debian Oval Importer | Affected by | VCID-bace-jatv-aaac | None | 36.0.0 |