CVE-2017-8283

2017-04-26 07:59:00 2017-05-10 19:46:51

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Debian Dpkg 1.8.3 (not an official CPE) Debian Dpkg 1.16.6 (not an official CPE) Debian Dpkg 1.16.4 (not an official CPE) Debian Dpkg 1.16.7 (not an official CPE) Debian Dpkg 1.16.5 (not an official CPE) Debian Dpkg 1.16.0 (not an official CPE) Debian Dpkg 1.16.3 (not an official CPE) Debian Dpkg 1.16.1 (not an official CPE) Debian Dpkg 1.16.8 (not an official CPE) Debian Dpkg 1.16.9 (not an official CPE) Debian Dpkg 1.16.2 (not an official CPE) Debian Dpkg 1.15.5.4 (not an official CPE) Debian Dpkg 1.6.12 (not an official CPE) Debian Dpkg 1.15.5.1 (not an official CPE) Debian Dpkg 1.16.10 (not an official CPE) Debian Dpkg 1.15.5.6 (not an official CPE) Debian Dpkg 1.6.11 (not an official CPE) Debian Dpkg 1.6.10 (not an official CPE) Debian Dpkg 1.6.13 (not an official CPE) Debian Dpkg 1.4.0.16 (not an official CPE) Debian Dpkg 1.7.1 (not an official CPE) Debian Dpkg 1.4.0.15 (not an official CPE) Debian Dpkg 1.4.0.14 (not an official CPE) Debian Dpkg 1.7.0 (not an official CPE) Debian Dpkg 1.4.0.17 (not an official CPE) Debian Dpkg 1.15.5.3 (not an official CPE) Debian Dpkg 1.15.5.2 (not an official CPE) Debian Dpkg 1.15.5.5 (not an official CPE) Debian Dpkg 1.13.14 (not an official CPE) Debian Dpkg 1.3.9 (not an official CPE) Debian Dpkg 1.18.22 (not an official CPE) Debian Dpkg 1.13.11.1 (not an official CPE) Debian Dpkg 1.14.16.1 (not an official CPE) Debian Dpkg 1.3.8 (not an official CPE) Debian Dpkg 1.18.20 (not an official CPE) Debian Dpkg 1.13.18 (not an official CPE) Debian Dpkg 1.18.23 (not an official CPE) Debian Dpkg 1.13.13 (not an official CPE) Debian Dpkg 1.13.12 (not an official CPE) Debian Dpkg 1.18.21 (not an official CPE) Debian Dpkg 1.13.15 (not an official CPE) Debian Dpkg 1.13.17 (not an official CPE) Debian Dpkg 1.13.16 (not an official CPE) Debian Dpkg 1.9.0 (not an official CPE) Debian Dpkg 1.13.19 (not an official CPE) Debian Dpkg 1.14.16.2 (not an official CPE) Debian Dpkg 1.13.10 (not an official CPE) Debian Dpkg 1.4.1.18 (not an official CPE) Debian Dpkg 1.4.1.15 (not an official CPE) Debian Dpkg 1.4.1.16 (not an official CPE) Debian Dpkg 1.13.11 (not an official CPE) Debian Dpkg 1.8.1.1 (not an official CPE) Debian Dpkg 1.9.13 (not an official CPE) Debian Dpkg 1.9.16 (not an official CPE) Debian Dpkg 1.9.14 (not an official CPE) Debian Dpkg 1.4.1.17 (not an official CPE) Debian Dpkg 1.9.12 (not an official CPE) Debian Dpkg 1.9.15 (not an official CPE) Debian Dpkg 1.9.10 (not an official CPE) Debian Dpkg 1.9.11 (not an official CPE) Debian Dpkg 1.15.8.1 (not an official CPE) Debian Dpkg 1.9.17 (not an official CPE) Debian Dpkg 1.18.11 (not an official CPE) Debian Dpkg 1.9.18 (not an official CPE) Debian Dpkg 1.4.1.14 (not an official CPE) Debian Dpkg 1.18.12 (not an official CPE) Debian Dpkg 1.15.8.8 (not an official CPE) Debian Dpkg 1.4.1.11 (not an official CPE) Debian Dpkg 1.18.15 (not an official CPE) Debian Dpkg 1.15.8.7 (not an official CPE) Debian Dpkg 1.9.19 (not an official CPE) Debian Dpkg 1.4.1.12 (not an official CPE) Debian Dpkg 1.18.10 (not an official CPE) Debian Dpkg 1.15.8.9 (not an official CPE) Debian Dpkg 1.4.1.10 (not an official CPE) Debian Dpkg 1.15.8.4 (not an official CPE) Debian Dpkg 1.10.1 (not an official CPE) Debian Dpkg 1.18.19 (not an official CPE) Debian Dpkg 1.15.8.3 (not an official CPE) Debian Dpkg 1.15.8.6 (not an official CPE) Debian Dpkg 1.4.1.13 (not an official CPE) Debian Dpkg 1.18.17 (not an official CPE) Debian Dpkg 1.15.8.5 (not an official CPE) Debian Dpkg 1.4.1.19 (not an official CPE) Debian Dpkg 1.18.18 (not an official CPE) Debian Dpkg 1.18.13 (not an official CPE) Debian Dpkg 1.14.16.6 (not an official CPE) Debian Dpkg 1.9.20 (not an official CPE) Debian Dpkg 1.18.16 (not an official CPE) Debian Dpkg 1.14.16.3 (not an official CPE) Debian Dpkg 1.14.16.4 (not an official CPE) Debian Dpkg 1.18.14 (not an official CPE) Debian Dpkg 1.9.21 (not an official CPE) Debian Dpkg 1.15.8.2 (not an official CPE) Debian Dpkg 1.14.16.5 (not an official CPE) Debian Dpkg 1.14.8 (not an official CPE) Debian Dpkg 1.14.6 (not an official CPE) Debian Dpkg 1.14.9 (not an official CPE) Debian Dpkg 1.14.7 (not an official CPE) Debian Dpkg 1.4.0 (not an official CPE) Debian Dpkg 1.16.1.1 (not an official CPE) Debian Dpkg 1.4.1 (not an official CPE) Debian Dpkg 1.10 (not an official CPE) Debian Dpkg 1.16.1.2 (not an official CPE) Debian Dpkg 1.14.2 (not an official CPE) Debian Dpkg 1.14.5 (not an official CPE) Debian Dpkg 1.14.3 (not an official CPE) Debian Dpkg 1.14.0 (not an official CPE) Debian Dpkg 1.14.1 (not an official CPE) Debian Dpkg 1.14.4 (not an official CPE) Debian Dpkg 1.4.0.26.0.1 (not an official CPE) Debian dpkg 1.17.21 Debian dpkg 1.17.22 Debian dpkg 1.17.20 Debian Dpkg 1.9.1 (not an official CPE) Debian dpkg 1.17.23 Debian Dpkg 1.15.3.1 (not an official CPE) Debian dpkg 1.15.8.10 Debian Dpkg 1.14.24 (not an official CPE) Debian Dpkg 1.4.0.11 (not an official CPE) Debian Dpkg 1.17.5 (not an official CPE) Debian Dpkg 1.4.0.10 (not an official CPE) Debian Dpkg 1.14.25 (not an official CPE) Debian Dpkg 1.6 (not an official CPE) Debian Dpkg 1.4.0.13 (not an official CPE) Debian Dpkg 1.17.3 (not an official CPE) Debian Dpkg 1.17.6 (not an official CPE) Debian Dpkg 1.17.9 (not an official CPE) Debian Dpkg 1.17.4 (not an official CPE) Debian Dpkg 1.3.1 (not an official CPE) Debian Dpkg 1.4.0.19 (not an official CPE) Debian Dpkg 1.3.6 (not an official CPE) Debian Dpkg 1.14.22 (not an official CPE) Debian Dpkg 1.4.0.18 (not an official CPE) Debian Dpkg 1.3.3 (not an official CPE) Debian Dpkg 1.3.0 (not an official CPE) Debian Dpkg 1.4.0.12 (not an official CPE) Debian Dpkg 1.16.4.1 (not an official CPE) Debian Dpkg 1.3.2 (not an official CPE) Debian Dpkg 1.16.4.2 (not an official CPE) Debian Dpkg 1.8.3.1 (not an official CPE) Debian Dpkg 1.17.2 (not an official CPE) Debian Dpkg 1.17.0 (not an official CPE) Debian Dpkg 1.16.4.3 (not an official CPE) Debian Dpkg 1.14.20 (not an official CPE) Debian Dpkg 1.14.23 (not an official CPE) Debian Dpkg 1.14.21 (not an official CPE) Debian Dpkg 1.17.7 (not an official CPE) Debian Dpkg 1.17.8 (not an official CPE) Debian Dpkg 1.17.1 (not an official CPE) Debian Dpkg 1.14.13 (not an official CPE) Debian Dpkg 1.14.16 (not an official CPE) Debian Dpkg 1.14.19 (not an official CPE) Debian Dpkg 1.14.14 (not an official CPE) Debian Dpkg 1.14.15 (not an official CPE) Debian Dpkg 1.14.11 (not an official CPE) Debian Dpkg 1.14.17 (not an official CPE) Debian Dpkg 1.14.18 (not an official CPE) Debian Dpkg 1.14.12 (not an official CPE) Debian Dpkg 1.14.10 (not an official CPE) Debian Dpkg 1.4.1.1 (not an official CPE) Debian Dpkg 1.4.1.3 (not an official CPE) Debian Dpkg 1.15.6.1 (not an official CPE) Debian Dpkg 1.3.10 (not an official CPE) Debian Dpkg 1.4.1.2 (not an official CPE) Debian Dpkg 1.6.12.99 (not an official CPE) Debian Dpkg 1.6.3 (not an official CPE) Debian Dpkg 1.13.25 (not an official CPE) Debian Dpkg 1.13.24 (not an official CPE) Debian Dpkg 1.13.23 (not an official CPE) Debian Dpkg 1.13.21 (not an official CPE) Debian Dpkg 1.13.20 (not an official CPE) Debian Dpkg 1.3.13 (not an official CPE) Debian Dpkg 1.13.22 (not an official CPE) Debian Dpkg 1.3.12 (not an official CPE) Debian Dpkg 1.3.5 (not an official CPE) Debian Dpkg 1.3.14 (not an official CPE) Debian Dpkg 1.3.7 (not an official CPE) Debian Dpkg 1.3.11 (not an official CPE) Debian Dpkg 1.3.4 (not an official CPE) Debian Dpkg 1.10.21 (not an official CPE) Debian Dpkg 1.10.26 (not an official CPE) Debian Dpkg 1.15.7 (not an official CPE) Debian Dpkg 1.10.23 (not an official CPE) Debian Dpkg 1.4.0.9 (not an official CPE) Debian Dpkg 1.10.20 (not an official CPE) Debian Dpkg 1.15.5 (not an official CPE) Debian Dpkg 1.15.8 (not an official CPE) Debian Dpkg 1.10.22 (not an official CPE) Debian Dpkg 1.15.6 (not an official CPE) Debian Dpkg 1.4.0.7 (not an official CPE) Debian Dpkg 1.10.25 (not an official CPE) Debian Dpkg 1.4.0.6 (not an official CPE) Debian Dpkg 1.10.27 (not an official CPE) Debian Dpkg 1.4.0.5 (not an official CPE) Debian Dpkg 1.10.24 (not an official CPE) Debian Dpkg 1.4.0.8 (not an official CPE) Debian Dpkg 1.15.1 (not an official CPE) Debian Dpkg 1.15.4 (not an official CPE) Debian Dpkg 1.15.2 (not an official CPE) Debian Dpkg 1.10.18 (not an official CPE) Debian Dpkg 1.10.17 (not an official CPE) Debian Dpkg 1.15.0 (not an official CPE) Debian Dpkg 1.10.19 (not an official CPE) Debian Dpkg 1.15.3 (not an official CPE) Debian Dpkg 1.10.10 (not an official CPE) Debian Dpkg 1.10.15 (not an official CPE) Debian Dpkg 1.10.12 (not an official CPE) Debian Dpkg 1.15.4.1 (not an official CPE) Debian Dpkg 1.10.11 (not an official CPE) Debian Dpkg 1.10.14 (not an official CPE) Debian Dpkg 1.10.16 (not an official CPE) Debian Dpkg 1.10.13 (not an official CPE) Debian Dpkg 1.6.2 (not an official CPE) Debian Dpkg 1.6.4 (not an official CPE) Debian Dpkg 1.6.1 (not an official CPE) Debian Dpkg 1.4.0.23.1 (not an official CPE) Debian Dpkg 1.4.0.23.2 (not an official CPE) Debian Dpkg 1.6.6 (not an official CPE) Debian Dpkg 1.4.1.9 (not an official CPE) Debian Dpkg 1.18.4 (not an official CPE) Debian Dpkg 1.6.8 (not an official CPE) Debian Dpkg 1.4.1.8 (not an official CPE) Debian Dpkg 1.6.5 (not an official CPE) Debian Dpkg 1.18.2 (not an official CPE) Debian Dpkg 1.18.5 (not an official CPE) Debian Dpkg 1.6.7 (not an official CPE) Debian Dpkg 1.18.8 (not an official CPE) Debian Dpkg 1.18.3 (not an official CPE) Debian Dpkg 1.4.1.6 (not an official CPE) Debian Dpkg 1.4.0.30 (not an official CPE) Debian Dpkg 1.8.1 (not an official CPE) Debian Dpkg 1.4.1.5 (not an official CPE) Debian Dpkg 1.4.1.4 (not an official CPE) Debian Dpkg 1.6.9 (not an official CPE) Debian Dpkg 1.4.1.7 (not an official CPE) Debian Dpkg 1.4.0.31 (not an official CPE) Debian Dpkg 1.10.6 (not an official CPE) Debian Dpkg 1.4.0.27 (not an official CPE) Debian Dpkg 1.18.1 (not an official CPE) Debian Dpkg 1.10.9 (not an official CPE) Debian Dpkg 1.10.7 (not an official CPE) Debian Dpkg 1.4.0.26 (not an official CPE) Debian Dpkg 1.4.0.25 (not an official CPE) Debian Dpkg 1.4.0.28 (not an official CPE) Debian Dpkg 1.18.6 (not an official CPE) Debian Dpkg 1.18.9 (not an official CPE) Debian Dpkg 1.10.4 (not an official CPE) Debian Dpkg 1.18.7 (not an official CPE) Debian Dpkg 1.10.2 (not an official CPE) Debian Dpkg 1.10.5 (not an official CPE) Debian Dpkg 1.18.0 (not an official CPE) Debian Dpkg 1.10.8 (not an official CPE) Debian Dpkg 1.10.3 (not an official CPE) Debian Dpkg 1.15.7.2 (not an official CPE) Debian Dpkg 1.4.0.22 (not an official CPE) Debian Dpkg 1.4.0.21 (not an official CPE) Debian Dpkg 1.4.0.24 (not an official CPE) Debian Dpkg 1.4.0.29 (not an official CPE) Debian Dpkg 1.4.0.23 (not an official CPE) Debian Dpkg 1.4.0.20 (not an official CPE) Debian Dpkg 1.10.18.1 (not an official CPE) Debian Dpkg 1.4.0.2 (not an official CPE) Debian Dpkg 1.4.0.1 (not an official CPE) Debian Dpkg 1.10.28 (not an official CPE) Debian Dpkg 1.4.0.4 (not an official CPE) Debian Dpkg 1.15.7.1 (not an official CPE) Debian Dpkg 1.9.2 (not an official CPE) Debian dpkg 1.17.10 Debian Dpkg 1.13.9 (not an official CPE) Debian Dpkg 1.9.8 (not an official CPE) Debian Dpkg 1.9.3 (not an official CPE) Debian Dpkg 1.13.7 (not an official CPE) Debian Dpkg 1.4.0.3 (not an official CPE) Debian dpkg 1.17.11 Debian dpkg 1.17.14 Debian Dpkg 1.9.4 (not an official CPE) Debian Dpkg 1.13.8 (not an official CPE) Debian Dpkg 1.7.2 (not an official CPE) Debian dpkg 1.17.18 Debian dpkg 1.17.16 Debian Dpkg 1.16.0.2 (not an official CPE) Debian dpkg 1.17.19 Debian Dpkg 1.9.9 (not an official CPE) Debian dpkg 1.17.17 Debian Dpkg 1.16.0.3 (not an official CPE) Debian Dpkg 1.9.7 (not an official CPE) Debian Dpkg 1.13.3 (not an official CPE) Debian Dpkg 1.13.6 (not an official CPE) Debian Dpkg 1.13.4 (not an official CPE) Debian dpkg 1.17.12 Debian dpkg 1.17.15 Debian Dpkg 1.16.0.1 (not an official CPE) Debian Dpkg 1.13.1 (not an official CPE) Debian dpkg 1.17.13 Debian Dpkg 1.13.2 (not an official CPE) Debian Dpkg 1.13.5 (not an official CPE) Debian Dpkg 1.13.0 (not an official CPE) Debian Dpkg 1.8.2 (not an official CPE) Debian Dpkg 1.8.0 (not an official CPE)