Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.

This update for dpkg fixes the following issues :

This security issue was fixed :

  - CVE-2015-0860: Off-by-one error in the extracthalf     function in dpkg-deb/extract.c in the dpkg-deb component     in dpkg allowed remote attackers to execute arbitrary     code via the archive magic version number in an     'old-style' Debian binary package, which triggered a     stack-based buffer overflow (bsc#957160).

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for dpkg fixes the following issues: This security issue was fixed :

  - CVE-2015-0860: Off-by-one error in the extracthalf     function in dpkg-deb/extract.c in the dpkg-deb component     in dpkg allowed remote attackers to execute arbitrary     code via the archive magic version number in an     'old-style' Debian binary package, which triggered a     stack-based buffer overflow (bsc#957160).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream vesion, 1.17.27 . Security fix for CVE-2015-0860

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream vesion, 1.17.27, Security fix for CVE-2015-0860

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201612-07 (dpkg: Arbitrary code execution)

    Gentoo Linux developer, Hanno B&ouml;ck, discovered an off-by-one error in       the dpkg-deb component of dpkg, the Debian package management system,       which triggers a stack-based buffer overflow.
  Impact :

    An attacker could potentially execute arbitrary code if an user or an       automated system were tricked into processing a specially crafted Debian       binary package (.deb).
  Workaround :

    There is no known workaround at this time.

Salvatore Bonaccorso reports :

Hanno Boeck discovered a stack-based buffer overflow in the dpkg-deb component of dpkg, the Debian package management system. This flaw could potentially lead to arbitrary code execution if a user or an automated system were tricked into processing a specially crafted Debian binary package (.deb) in the old style Debian binary package format.

Hanno Boeck discovered that the dpkg-deb tool incorrectly handled certain old style Debian binary packages. If a user or an automated system were tricked into unpacking a specially crafted binary package, a remote attacker could possibly use this issue to execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Hanno Boeck discovered a stack-based buffer overflow in the dpkg-deb component of dpkg, the Debian package management system. This flaw could potentially lead to arbitrary code execution if a user or an automated system were tricked into processing a specially crafted Debian binary package (.deb) in the old style Debian binary package format.

This update also includes updated translations and additional bug fixes.

ID	Name	Product	Family	Severity
100036	openSUSE Security Update : dpkg (openSUSE-2017-549)	Nessus	SuSE Local Security Checks	high
99654	SUSE SLED12 / SLES12 Security Update : dpkg (SUSE-SU-2017:1096-1)	Nessus	SuSE Local Security Checks	high
95580	Fedora 24 : dpkg (2016-5608472a90)	Nessus	Fedora Local Security Checks	high
95578	Fedora 23 : dpkg (2016-10ec03ed27)	Nessus	Fedora Local Security Checks	high
95542	Fedora 25 : dpkg (2016-0918477a60)	Nessus	Fedora Local Security Checks	high
95522	GLSA-201612-07 : dpkg: Arbitrary code execution	Nessus	Gentoo Local Security Checks	high
87613	FreeBSD : dpkg -- stack-based buffer overflow (876768aa-ab1e-11e5-8a30-5453ed2e2b49)	Nessus	FreeBSD Local Security Checks	high
87108	Ubuntu 14.04 LTS : dpkg vulnerability (USN-2820-1)	Nessus	Ubuntu Local Security Checks	critical
87080	Debian DSA-3407-1 : dpkg - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2015-0860

critical

Tenable Plugins

high

high

high

high

high

high

high

critical

high