Security Advisory

CVE-2017-8283

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-26 05:28:00

Last updated 2024-08-05 16:34:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.

← Browse all CVEs View on cve.org ↗