Debian dpkg 1.18.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:debian:dpkg:1.18.4:*:*:*:*:*:*:*

part: a version: 1.18.4 update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductDpkg (70d9845d-a063-5593-86fb-6bada4efd00c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/dpkg purl2cpe 2026-06-01 10:17:13.902378
pkg:deb/ubuntu/dpkg purl2cpe 2026-06-01 10:17:13.902380
pkg:github/davidben/dpkg purl2cpe 2026-06-01 10:17:13.902381
pkg:github/guillemj/dpkg purl2cpe 2026-06-01 10:17:13.902382
pkg:rpm/fedora/dpkg purl2cpe 2026-06-01 10:17:13.902384
pkg:rpm/opensuse/dpkg purl2cpe 2026-06-01 10:17:13.902385

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8283 vulnerable 2026-06-03 14:37:39.790881 Details available
dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD.
Published: 2017-04-26T05:28:00.000Z
Updated: 2024-08-05T16:34:21.674Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.