CVE-2014-0471

Published Apr 30, 2014

Last updated 19 days ago

Overview

Description
Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."
Source
security@debian.org
NVD status
Modified
Products
dpkg, ubuntu_linux

Risk scores

CVSS 2.0

Type
Primary
Base score
5
Impact score
2.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-22

Social media

Hype score
Not currently trending

Configurations