PT-2018-19279 · Debian · Dpkg

Published 2018-08-23 · Updated 2018-08-23

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions dpkg (affected versions not specified)

Description A flaw was found in dpkg that allows an attacker to perform a directory traversal by extracting a crafted .deb file with a /DEBIAN symlink using dpkg-deb --raw-extract.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2018-0352

Affected Products

Dpkg

References · 5

• https://osv.dev/vulnerability/MGASA-2018-0352 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/64MG54Q347INMLYDW47XBYZQ3BQCXEXC · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0352.html · Security Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879982 · Note
• https://bugs.mageia.org/show_bug.cgi?id=23411 · Note