CVE-2014-3864

EPSS 0.61%

dpkg - security update

發布日:2014/5/30修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-3864

描述

Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header line.

受影響套件(2)

Debian/dpkgfrom 0, < 1.17.10
Debian/dpkgfrom 0, < 1.15.11

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-3864