Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7cgr-cwf8-5c99

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

EPSS

Процентиль: 92%
0.04699
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 9 лет назад

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

CVSS3: 9.8
nvd
больше 9 лет назад

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

CVSS3: 9.8
debian
больше 9 лет назад

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU pat ...

CVSS3: 9.8
altlinux
больше 8 лет назад

ALT-PU-2018-1271: package `dpkg` update to version 1.19.0.5-alt1

CVSS3: 9.8
altlinux
больше 11 лет назад

ALT-PU-2015-1399: package `dpkg` update to version 1.17.25-alt1

EPSS

Процентиль: 92%
0.04699
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22