https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T21:38:20.864917+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2014-3865 CVE-2014-3865 2026-10-22T21:38:20.867332+00:00

Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pseudo-header in conjunction with (1) missing --- and +++ header lines or (2) a +++ header line with a blank pathname.

 https://cve.radiocsirt.org/vuln/usn-2242-1 USN-2242-1 — dpkg vulnerabilities 2026-10-22T21:38:20.867381+00:00

Affected: Ubuntu:14.04:LTS: dpkg

It was discovered that dpkg incorrectly handled certain patches when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system.