CVE-2014-0471
CVE-2014-0471
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."
EPSS 2.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
dpkg Debian:12
- Affected ranges
- ECOSYSTEM: < 1.17.8
Update to 1.17.8
dpkg Debian:13
- Affected ranges
- ECOSYSTEM: < 1.17.8
Update to 1.17.8
dpkg Debian:14
- Affected ranges
- ECOSYSTEM: < 1.17.8
Update to 1.17.8
dpkg Ubuntu:14.04:LTS
- Versions
- 1.16.12ubuntu1
- 1.17.1ubuntu1
- 1.17.5ubuntu1
- 1.17.5ubuntu2
- 1.17.5ubuntu3
- 1.17.5ubuntu4
- 1.17.5ubuntu5
- Affected ranges
- ECOSYSTEM: < 1.17.5ubuntu5.1
Update to 1.17.5ubuntu5.1