medium5.0
CVE-2014-0471
Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers…
Impact
Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Dpkg | through 1.15.8.8 Versions 1.9.1, 1.9.2, 1.9.3, 1.9.7, 1.9.8 |
| Canonical | Ubuntu Linux | Versions 10.04, 12.04, 12.10, 13.10, 14.04 |