https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:55:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-06898 cnvd-2017-06898 https://cve.radiocsirt.org/vuln/cnvd-2017-06898 https://cve.radiocsirt.org/vuln/euvd-2026-75221 EUVD-2026-75221 https://cve.radiocsirt.org/vuln/euvd-2026-75221 https://cve.radiocsirt.org/vuln/fkie_cve-2017-8283 <p>dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.</p> <p>dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-8283 https://cve.radiocsirt.org/vuln/ghsa-7cgr-cwf8-5c99 <p>dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.</p> <p>dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.</p> https://cve.radiocsirt.org/vuln/ghsa-7cgr-cwf8-5c99 https://cve.radiocsirt.org/vuln/gsd-2017-8283 gsd-2017-8283 https://cve.radiocsirt.org/vuln/gsd-2017-8283 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-8283 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: dpkg</p> <p>dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: dpkg</p> <p>dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-8283