← Back

CVE-2017-8283

nvd nist
Published: Apr 26, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

Affected (300)

Products: Debian: Dpkg
Debian
1 product
Dpkg
Configuration A
300 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Dpkg
Version 1.10.10
Dpkg
Version 1.10.11
Dpkg
Version 1.10.12
Dpkg
Version 1.10.13
Dpkg
Version 1.10.14
Dpkg
Version 1.10.15
Dpkg
Version 1.10.16
Dpkg
Version 1.10.17
Dpkg
Version 1.10.18.1
Dpkg
Version 1.10.18
Dpkg
Version 1.10.19
Dpkg
Version 1.10.1
Dpkg
Version 1.10.20
Dpkg
Version 1.10.21
Dpkg
Version 1.10.22
Dpkg
Version 1.10.23
Dpkg
Version 1.10.24
Dpkg
Version 1.10.25
Dpkg
Version 1.10.26
Dpkg
Version 1.10.27
Dpkg
Version 1.10.28
Dpkg
Version 1.10.2
Dpkg
Version 1.10.3
Dpkg
Version 1.10.4
Dpkg
Version 1.10.5
Dpkg
Version 1.10.6
Dpkg
Version 1.10.7
Dpkg
Version 1.10.8
Dpkg
Version 1.10.9
Dpkg
Version 1.10
Dpkg
Version 1.13.0
Dpkg
Version 1.13.10
Dpkg
Version 1.13.11.1
Dpkg
Version 1.13.11
Dpkg
Version 1.13.12
Dpkg
Version 1.13.13
Dpkg
Version 1.13.14
Dpkg
Version 1.13.15
Dpkg
Version 1.13.16
Dpkg
Version 1.13.17
Dpkg
Version 1.13.18
Dpkg
Version 1.13.19
Dpkg
Version 1.13.1
Dpkg
Version 1.13.20
Dpkg
Version 1.13.21
Dpkg
Version 1.13.22
Dpkg
Version 1.13.23
Dpkg
Version 1.13.24
Dpkg
Version 1.13.25
Dpkg
Version 1.13.2
Dpkg
Version 1.13.3
Dpkg
Version 1.13.4
Dpkg
Version 1.13.5
Dpkg
Version 1.13.6
Dpkg
Version 1.13.7
Dpkg
Version 1.13.8
Dpkg
Version 1.13.9
Dpkg
Version 1.14.0
Dpkg
Version 1.14.10
Dpkg
Version 1.14.11
Dpkg
Version 1.14.12
Dpkg
Version 1.14.13
Dpkg
Version 1.14.14
Dpkg
Version 1.14.15
Dpkg
Version 1.14.16.1
Dpkg
Version 1.14.16.2
Dpkg
Version 1.14.16.3
Dpkg
Version 1.14.16.4
Dpkg
Version 1.14.16.5
Dpkg
Version 1.14.16.6
Dpkg
Version 1.14.16
Dpkg
Version 1.14.17
Dpkg
Version 1.14.18
Dpkg
Version 1.14.19
Dpkg
Version 1.14.1
Dpkg
Version 1.14.20
Dpkg
Version 1.14.21
Dpkg
Version 1.14.22
Dpkg
Version 1.14.23
Dpkg
Version 1.14.24
Dpkg
Version 1.14.25
Dpkg
Version 1.14.2
Dpkg
Version 1.14.3
Dpkg
Version 1.14.4
Dpkg
Version 1.14.5
Dpkg
Version 1.14.6
Dpkg
Version 1.14.7
Dpkg
Version 1.14.8
Dpkg
Version 1.14.9
Dpkg
Version 1.15.0
Dpkg
Version 1.15.1
Dpkg
Version 1.15.2
Dpkg
Version 1.15.3.1
Dpkg
Version 1.15.3
Dpkg
Version 1.15.4.1
Dpkg
Version 1.15.4
Dpkg
Version 1.15.5.1
Dpkg
Version 1.15.5.2
Dpkg
Version 1.15.5.3
Dpkg
Version 1.15.5.4
Dpkg
Version 1.15.5.5
Dpkg
Version 1.15.5.6
Dpkg
Version 1.15.5
Dpkg
Version 1.15.6.1
Dpkg
Version 1.15.6
Dpkg
Version 1.15.7.1
Dpkg
Version 1.15.7.2
Dpkg
Version 1.15.7
Dpkg
Version 1.15.8.10
Dpkg
Version 1.15.8.1
Dpkg
Version 1.15.8.2
Dpkg
Version 1.15.8.3
Dpkg
Version 1.15.8.4
Dpkg
Version 1.15.8.5
Dpkg
Version 1.15.8.6
Dpkg
Version 1.15.8.7
Dpkg
Version 1.15.8.8
Dpkg
Version 1.15.8.9
Dpkg
Version 1.15.8
Dpkg
Version 1.16.0.1
Dpkg
Version 1.16.0.2
Dpkg
Version 1.16.0.3
Dpkg
Version 1.16.0
Dpkg
Version 1.16.1.1
Dpkg
Version 1.16.1.2
Dpkg
Version 1.16.10
Dpkg
Version 1.16.1
Dpkg
Version 1.16.2
Dpkg
Version 1.16.3
Dpkg
Version 1.16.4.1
Dpkg
Version 1.16.4.2
Dpkg
Version 1.16.4.3
Dpkg
Version 1.16.4
Dpkg
Version 1.16.5
Dpkg
Version 1.16.6
Dpkg
Version 1.16.7
Dpkg
Version 1.16.8
Dpkg
Version 1.16.9
Dpkg
Version 1.17.0
Dpkg
Version 1.17.10
Dpkg
Version 1.17.11
Dpkg
Version 1.17.12
Dpkg
Version 1.17.13
Dpkg
Version 1.17.14
Dpkg
Version 1.17.15
Dpkg
Version 1.17.16
Dpkg
Version 1.17.17
Dpkg
Version 1.17.18
Dpkg
Version 1.17.19
Dpkg
Version 1.17.1
Dpkg
Version 1.17.20
Dpkg
Version 1.17.21
Dpkg
Version 1.17.22
Dpkg
Version 1.17.23
Dpkg
Version 1.17.2
Dpkg
Version 1.17.3
Dpkg
Version 1.17.4
Dpkg
Version 1.17.5
Dpkg
Version 1.17.6
Dpkg
Version 1.17.7
Dpkg
Version 1.17.8
Dpkg
Version 1.17.9
Dpkg
Version 1.18.0
Dpkg
Version 1.18.10
Dpkg
Version 1.18.11
Dpkg
Version 1.18.12
Dpkg
Version 1.18.13
Dpkg
Version 1.18.14
Dpkg
Version 1.18.15
Dpkg
Version 1.18.16
Dpkg
Version 1.18.17
Dpkg
Version 1.18.18
Dpkg
Version 1.18.19
Dpkg
Version 1.18.1
Dpkg
Version 1.18.20
Dpkg
Version 1.18.21
Dpkg
Version 1.18.22
Dpkg
Version 1.18.23
Dpkg
Version 1.18.2
Dpkg
Version 1.18.3
Dpkg
Version 1.18.4
Dpkg
Version 1.18.5
Dpkg
Version 1.18.6
Dpkg
Version 1.18.7
Dpkg
Version 1.18.8
Dpkg
Version 1.18.9
Dpkg
Version 1.3.0
Dpkg
Version 1.3.10
Dpkg
Version 1.3.11
Dpkg
Version 1.3.12
Dpkg
Version 1.3.13
Dpkg
Version 1.3.14
Dpkg
Version 1.3.1
Dpkg
Version 1.3.2
Dpkg
Version 1.3.3
Dpkg
Version 1.3.4
Dpkg
Version 1.3.5
Dpkg
Version 1.3.6
Dpkg
Version 1.3.7
Dpkg
Version 1.3.8
Dpkg
Version 1.3.9
Dpkg
Version 1.4.0.10
Dpkg
Version 1.4.0.11
Dpkg
Version 1.4.0.12
Dpkg
Version 1.4.0.13
Dpkg
Version 1.4.0.14
Dpkg
Version 1.4.0.15
Dpkg
Version 1.4.0.16
Dpkg
Version 1.4.0.17
Dpkg
Version 1.4.0.18
Dpkg
Version 1.4.0.19
Dpkg
Version 1.4.0.1
Dpkg
Version 1.4.0.20
Dpkg
Version 1.4.0.21
Dpkg
Version 1.4.0.22
Dpkg
Version 1.4.0.23.1
Dpkg
Version 1.4.0.23.2
Dpkg
Version 1.4.0.23
Dpkg
Version 1.4.0.24
Dpkg
Version 1.4.0.25
Dpkg
Version 1.4.0.26.0.1
Dpkg
Version 1.4.0.26
Dpkg
Version 1.4.0.27
Dpkg
Version 1.4.0.28
Dpkg
Version 1.4.0.29
Dpkg
Version 1.4.0.2
Dpkg
Version 1.4.0.30
Dpkg
Version 1.4.0.31
Dpkg
Version 1.4.0.3
Dpkg
Version 1.4.0.4
Dpkg
Version 1.4.0.5
Dpkg
Version 1.4.0.6
Dpkg
Version 1.4.0.7
Dpkg
Version 1.4.0.8
Dpkg
Version 1.4.0.9
Dpkg
Version 1.4.0
Dpkg
Version 1.4.1.10
Dpkg
Version 1.4.1.11
Dpkg
Version 1.4.1.12
Dpkg
Version 1.4.1.13
Dpkg
Version 1.4.1.14
Dpkg
Version 1.4.1.15
Dpkg
Version 1.4.1.16
Dpkg
Version 1.4.1.17
Dpkg
Version 1.4.1.18
Dpkg
Version 1.4.1.19
Dpkg
Version 1.4.1.1
Dpkg
Version 1.4.1.2
Dpkg
Version 1.4.1.3
Dpkg
Version 1.4.1.4
Dpkg
Version 1.4.1.5
Dpkg
Version 1.4.1.6
Dpkg
Version 1.4.1.7
Dpkg
Version 1.4.1.8
Dpkg
Version 1.4.1.9
Dpkg
Version 1.4.1
Dpkg
Version 1.6.10
Dpkg
Version 1.6.11
Dpkg
Version 1.6.12.99
Dpkg
Version 1.6.12
Dpkg
Version 1.6.13
Dpkg
Version 1.6.1
Dpkg
Version 1.6.2
Dpkg
Version 1.6.3
Dpkg
Version 1.6.4
Dpkg
Version 1.6.5
Dpkg
Version 1.6.6
Dpkg
Version 1.6.7
Dpkg
Version 1.6.8
Dpkg
Version 1.6.9
Dpkg
Version 1.6
Dpkg
Version 1.7.0
Dpkg
Version 1.7.1
Dpkg
Version 1.7.2
Dpkg
Version 1.8.0
Dpkg
Version 1.8.1.1
Dpkg
Version 1.8.1
Dpkg
Version 1.8.2
Dpkg
Version 1.8.3.1
Dpkg
Version 1.8.3
Dpkg
Version 1.9.0
Dpkg
Version 1.9.10
Dpkg
Version 1.9.11
Dpkg
Version 1.9.12
Dpkg
Version 1.9.13
Dpkg
Version 1.9.14
Dpkg
Version 1.9.15
Dpkg
Version 1.9.16
Dpkg
Version 1.9.17
Dpkg
Version 1.9.18
Dpkg
Version 1.9.19
Dpkg
Version 1.9.1
Dpkg
Version 1.9.20
Dpkg
Version 1.9.21
Dpkg
Version 1.9.2
Dpkg
Version 1.9.3
Dpkg
Version 1.9.4
Dpkg
Version 1.9.7
Dpkg
Version 1.9.8
Dpkg
Version 1.9.9

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (4)

Source: cve@mitre.org
Mailing ListPatchThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.