Поиск уязвимостей
Количество 10
Количество 10
BDU:2022-05892
Уязвимость компонента Dpkg::Source::Archive менеджера пакетов Dpkg, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2023-2049
ALT-PU-2023-2049: package `dpkg` update to version 1.21.21-alt1
ALT-PU-2022-2097
ALT-PU-2022-2097: package `dpkg` update to version 1.21.8-alt1
CVE-2022-1664
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
CVE-2022-1664
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
CVE-2022-1664
directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
CVE-2022-1664
Dpkg::Source::Archive in dpkg, the Debian package management system, b ...
SUSE-SU-2022:4081-1
Security update for dpkg
SUSE-SU-2022:2689-1
Security update for dpkg
GHSA-q7pv-fjh6-6xq6
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-05892 Уязвимость компонента Dpkg::Source::Archive менеджера пакетов Dpkg, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| ALT-PU-2023-2049 ALT-PU-2023-2049: package `dpkg` update to version 1.21.21-alt1 | CVSS3: 9.8 | 3% Низкий | больше 3 лет назад |
| ALT-PU-2022-2097 ALT-PU-2022-2097: package `dpkg` update to version 1.21.8-alt1 | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-1664 Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-1664 Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-1664 directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| CVE-2022-1664 Dpkg::Source::Archive in dpkg, the Debian package management system, b ... | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:4081-1 Security update for dpkg | 3% Низкий | почти 4 года назад | |
| SUSE-SU-2022:2689-1 Security update for dpkg | 3% Низкий | больше 4 лет назад | |
| GHSA-q7pv-fjh6-6xq6 Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
Уязвимостей на страницу