Vulnerabilities > Debian > Dpkg > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-04-13 | CVE-2015-0840 | Improper Access Control vulnerability in multiple products The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc). | 4.3 |
| 2015-01-20 | CVE-2014-8625 | Use of Externally-Controlled Format String vulnerability in Debian Dpkg Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package or (2) architecture name. | 6.8 |
| 2014-05-30 | CVE-2014-3227 | Path Traversal vulnerability in Debian Dpkg dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature, but is supported in environments with noncompliant patch programs, which triggers an interaction error that allows remote attackers to conduct directory traversal attacks and modify files outside of the intended directories via a crafted source package. | 6.4 |
| 2014-04-30 | CVE-2014-0471 | Path Traversal vulnerability in multiple products Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting." | 5.0 |
| 2011-01-11 | CVE-2011-0402 | Link Following vulnerability in Debian Dpkg dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory. | 6.8 |
| 2011-01-11 | CVE-2010-1679 | Path Traversal vulnerability in Debian Dpkg Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package. | 6.8 |
| 2010-03-15 | CVE-2010-0396 | Path Traversal vulnerability in Debian Dpkg Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive. | 5.8 |