Path Traversal in Debian Dpkg

CVE-2014-3227

dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature, but is supported in environments with noncompliant patch programs, which trigger…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.018 (76.4th percentile) — read the EPSS interpretation.

Affected products

Debian Dpkg — versions 1.15.9, 1.16.0, 1.16.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (mailing-list, x_refsource_MLIST)