Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Debian Subscribe
Filtered by product Dpkg-dev
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-3864 1 Debian 1 Dpkg-dev 2017-12-28 6.4 MEDIUM N/A
Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header line.
CVE-2014-3865 1 Debian 1 Dpkg-dev 2017-12-28 6.4 MEDIUM N/A
Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pseudo-header in conjunction with (1) missing --- and +++ header lines or (2) a +++ header line with a blank pathname.