Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before
    1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source
    package, related to "C-style filename quoting." (CVE-2014-0471)

Update to 1.16.15, fixes: CVE-2014-3864, CVE-2014-3865 , rhbz #1103026 Update to 1.16.14, fixes CVE-2014-0471, rhbz #1092210 .

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.16.14, fixes CVE-2014-0471, rhbz #1092210 .

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2183-2 advisory.

    USN-2183-1 fixed a vulnerability in dpkg. Javier Serrano Polo discovered that the fix introduced a     vulnerability in releases with an older version of the patch utility. This update fixes the problem.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2183-1 advisory.

    Jakub Wilk discovered that dpkg incorrectly certain paths and symlinks when unpacking source packages. If     a user or an automated system were tricked into unpacking a specially crafted source package, a remote     attacker could modify files outside the target unpack directory, leading to a denial of service or     potentially gaining access to the system.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Jakub Wilk discovered that dpkg did not correctly parse C-style filename quoting, allowing for paths to be traversed when unpacking a source package - leading to the creation of files outside the directory of the source being unpacked.

The update to the stable distribution (wheezy) incorporates non-security changes that were targeted for the point release 7.5.

ID	Name	Product	Family	Severity
401214	Alpine: multiple dpkg packages: security update to 1.16.12-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
401214	Alpine: multiple dpkg packages: security update to 1.16.12-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
77066	Fedora 19 : dpkg-1.16.15-1.fc19 (2014-8564)	Nessus	Fedora Local Security Checks	medium
74113	Fedora 20 : dpkg-1.16.14-1.fc20 (2014-6277)	Nessus	Fedora Local Security Checks	medium
73820	Ubuntu 14.04 LTS : dpkg vulnerability (USN-2183-2)	Nessus	Ubuntu Local Security Checks	high
73753	Ubuntu 14.04 LTS : dpkg vulnerability (USN-2183-1)	Nessus	Ubuntu Local Security Checks	high
73743	Debian DSA-2915-1 : dpkg - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-0471

high

Tenable Plugins

high

high

medium

medium

high

high

medium