Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Dpkg

cpan

Debian Package Manager Perl modules

View on git.dpkg.org · View on metacpan.org

Security Advisories for Dpkg in cpan

Critical
about 4 years ago

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that inc... CPANSA-Dpkg-2022-1664

cpan Dpkg
Critical
about 9 years ago

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source p... CPANSA-Dpkg-2017-8283

cpan Dpkg
High
almost 10 years ago

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/... CPANSA-Dpkg-2016-1238

cpan Dpkg
over 10 years ago

Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "ol... CPANSA-Dpkg-2015-0860

cpan Dpkg
about 11 years ago

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc). CPANSA-Dpkg-2015-0840

cpan Dpkg
over 11 years ago

Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package... CPANSA-Dpkg-2014-8625

cpan Dpkg
almost 12 years ago

Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pseudo-header in conjunction with (1) missing --- and ++... CPANSA-Dpkg-2014-3865

cpan Dpkg
almost 12 years ago

Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header line. CPANSA-Dpkg-2014-3864

cpan Dpkg
about 12 years ago

dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote attackers to conduct directory tr... CPANSA-Dpkg-2014-3127

cpan Dpkg
about 12 years ago

Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting." CPANSA-Dpkg-2014-0471

cpan Dpkg
over 15 years ago

Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package. CPANSA-Dpkg-2010-1679

cpan Dpkg
over 15 years ago

dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory. CPANSA-Dpkg-2011-0402

cpan Dpkg
almost 16 years ago

dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a ... CPANSA-Dpkg-2004-2768

cpan Dpkg
about 16 years ago

Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive. CPANSA-Dpkg-2010-0396

cpan Dpkg

Filter by Severity

Critical 2 High 1