PT-2019-7011 · Debian+1 · Devscripts+1

Published 2018-06-16 · Updated 2019-12-06 · CVE-2013-7325

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions devscripts versions prior to 2.13.19

Description An issue exists in uscan in devscripts, which could let a remote malicious user execute arbitrary code via a crafted tarball.

Recommendations For versions prior to 2.13.19, update to version 2.13.19 or later to resolve the issue. As a temporary workaround, consider restricting the use of uscan to minimize the risk of exploitation. Avoid using uscan with untrusted or crafted tarballs until the issue is resolved.

Fix

Related Identifiers

ALT-PU-2018-1905

CVE-2013-7325

DSA-2836-1

Affected Products

Alt Linux

Devscripts

References · 16

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5704 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7050 · Security Note
• https://osv.dev/vulnerability/CVE-2013-7325 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-7325 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7325 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5705 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-7325 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02344 · Security Note
• https://bdu.fstec.ru/vul/2015-02662 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-7325 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6888 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-1905 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7325 · Note
• http://openwall.com/lists/oss-security/2014/02/12/14 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2013-7325 · Note