Debian dpkg 1.4.0.10

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:debian:dpkg:1.4.0.10:*:*:*:*:*:*:*

part: a version: 1.4.0.10 update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductDpkg (70d9845d-a063-5593-86fb-6bada4efd00c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/dpkg purl2cpe 2026-06-01 10:17:13.903418
pkg:deb/ubuntu/dpkg purl2cpe 2026-06-01 10:17:13.903420
pkg:github/davidben/dpkg purl2cpe 2026-06-01 10:17:13.903421
pkg:github/guillemj/dpkg purl2cpe 2026-06-01 10:17:13.903423
pkg:rpm/fedora/dpkg purl2cpe 2026-06-01 10:17:13.903424
pkg:rpm/opensuse/dpkg purl2cpe 2026-06-01 10:17:13.903426

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8283 vulnerable 2026-06-03 14:37:39.662584 Details available
dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.
Published: 2017-04-26T05:28:00.000Z
Updated: 2024-08-05T16:34:21.674Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.