« List of all CVEs

CVE-2014-0471

Published: 4/30/2014 Last updated: 8/6/2024 Reserved: 12/19/2013

Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."

CNA assigner: debian (79363d38-fa19-49d1-9214-5f28da3f3ac5) Requested by: n/a

Opam packages affected (1)

conf-dpkg

Products affected (1)

Product Vendor Version
n/a n/a 5.5.2.5

References (6)