Back to Database
Status published
Critical
CVE-2017-8283
dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use...
Vulnerability Description
dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-8283
Credits & Attribution
No credits recorded in the NVD database.
References
More from debian
View All →CVE-2022-48174
There is a stack overflow vulnerability in ash.c:6030 in busybox...
Critical
9.8
CVE-2021-38172
perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian...
Critical
9.8
CVE-2021-36086
The CIL compiler in SELinux 3.2 has a use-after-free in...
Low
3.3
CVE-2021-31799
In RDoc 3.11 through 6.x before 6.3.1, as distributed with...
Unknown
0
CVE-2021-28374
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library...
High
7.5
Affected Vendor
debian
View all reports →Affected Software
dpkg
Vulnerable Versions:
1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.3.8, 1.3.9, 1.3.10, 1.3.11, 1.3.12, 1.3.13, 1.3.14, 1.4.0, 1.4.0.1, 1.4.0.2, 1.4.0.3, 1.4.0.4, 1.4.0.5, 1.4.0.6, 1.4.0.7, 1.4.0.8, 1.4.0.9, 1.4.0.10, 1.4.0.11, 1.4.0.12, 1.4.0.13, 1.4.0.14, 1.4.0.15, 1.4.0.16, 1.4.0.17, 1.4.0.18, 1.4.0.19, 1.4.0.20, 1.4.0.21, 1.4.0.22, 1.4.0.23, 1.4.0.23.1, 1.4.0.23.2, 1.4.0.24, 1.4.0.25, 1.4.0.26, 1.4.0.26.0.1, 1.4.0.27, 1.4.0.28, 1.4.0.29, 1.4.0.30, 1.4.0.31, 1.4.1, 1.4.1.1, 1.4.1.2, 1.4.1.3, 1.4.1.4, 1.4.1.5, 1.4.1.6, 1.4.1.7, 1.4.1.8, 1.4.1.9, 1.4.1.10, 1.4.1.11, 1.4.1.12, 1.4.1.13, 1.4.1.14, 1.4.1.15, 1.4.1.16, 1.4.1.17, 1.4.1.18, 1.4.1.19, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.6.10, 1.6.11, 1.6.12, 1.6.12.99, 1.6.13, 1.7.0, 1.7.1, 1.7.2, 1.8.0, 1.8.1, 1.8.1.1, 1.8.2, 1.8.3, 1.8.3.1, 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.7, 1.9.8, 1.9.9, 1.9.10, 1.9.11, 1.9.12, 1.9.13, 1.9.14, 1.9.15, 1.9.16, 1.9.17, 1.9.18, 1.9.19, 1.9.20, 1.9.21, 1.10, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5, 1.10.6, 1.10.7, 1.10.8, 1.10.9, 1.10.10, 1.10.11, 1.10.12, 1.10.13, 1.10.14, 1.10.15, 1.10.16, 1.10.17, 1.10.18, 1.10.18.1, 1.10.19, 1.10.20, 1.10.21, 1.10.22, 1.10.23, 1.10.24, 1.10.25, 1.10.26, 1.10.27, 1.10.28, 1.13.0, 1.13.1, 1.13.2, 1.13.3, 1.13.4, 1.13.5, 1.13.6, 1.13.7, 1.13.8, 1.13.9, 1.13.10, 1.13.11, 1.13.11.1, 1.13.12, 1.13.13, 1.13.14, 1.13.15, 1.13.16, 1.13.17, 1.13.18, 1.13.19, 1.13.20, 1.13.21, 1.13.22, 1.13.23, 1.13.24, 1.13.25, 1.14.0, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5, 1.14.6, 1.14.7, 1.14.8, 1.14.9, 1.14.10, 1.14.11, 1.14.12, 1.14.13, 1.14.14, 1.14.15, 1.14.16, 1.14.16.1, 1.14.16.2, 1.14.16.3, 1.14.16.4, 1.14.16.5, 1.14.16.6, 1.14.17, 1.14.18, 1.14.19, 1.14.20, 1.14.21, 1.14.22, 1.14.23, 1.14.24, 1.14.25, 1.15.0, 1.15.1, 1.15.2, 1.15.3, 1.15.3.1, 1.15.4, 1.15.4.1, 1.15.5, 1.15.5.1, 1.15.5.2, 1.15.5.3, 1.15.5.4, 1.15.5.5, 1.15.5.6, 1.15.6, 1.15.6.1, 1.15.7, 1.15.7.1, 1.15.7.2, 1.15.8, 1.15.8.1, 1.15.8.2, 1.15.8.3, 1.15.8.4, 1.15.8.5, 1.15.8.6, 1.15.8.7, 1.15.8.8, 1.15.8.9, 1.15.8.10, 1.16.0, 1.16.0.1, 1.16.0.2, 1.16.0.3, 1.16.1, 1.16.1.1, 1.16.1.2, 1.16.2, 1.16.3, 1.16.4, 1.16.4.1, 1.16.4.2, 1.16.4.3, 1.16.5, 1.16.6, 1.16.7, 1.16.8, 1.16.9, 1.16.10, 1.17.0, 1.17.1, 1.17.2, 1.17.3, 1.17.4, 1.17.5, 1.17.6, 1.17.7, 1.17.8, 1.17.9, 1.17.10, 1.17.11, 1.17.12, 1.17.13, 1.17.14, 1.17.15, 1.17.16, 1.17.17, 1.17.18, 1.17.19, 1.17.20, 1.17.21, 1.17.22, 1.17.23, 1.18.0, 1.18.1, 1.18.2, 1.18.3, 1.18.4, 1.18.5, 1.18.6, 1.18.7, 1.18.8, 1.18.9, 1.18.10, 1.18.11, 1.18.12, 1.18.13, 1.18.14, 1.18.15, 1.18.16, 1.18.17, 1.18.18, 1.18.19, 1.18.20, 1.18.21, 1.18.22, 1.18.23
Timeline
Official Publish:
April 26th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.