CVE-2012-0211 debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.or...
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/devscripts(Debian:12) | < 2.11.4 | 2.11.4 |
| debian/devscripts(Debian:13) | < 2.11.4 | 2.11.4 |
| debian/devscripts(Debian:14) | < 2.11.4 | 2.11.4 |
| devscripts devel team devscripts | = 2.10.0 | No fix listed |
| devscripts devel team devscripts | = 2.10.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.3 | No fix listed |
| devscripts devel team devscripts | = 2.10.6 | No fix listed |
| devscripts devel team devscripts | = 2.10.7 | No fix listed |
| devscripts devel team devscripts | = 2.10.8 | No fix listed |
| devscripts devel team devscripts | = 2.10.9 | No fix listed |
| devscripts devel team devscripts | = 2.10.10 | No fix listed |
| devscripts devel team devscripts | = 2.10.11 | No fix listed |
| devscripts devel team devscripts | = 2.10.12 | No fix listed |
| devscripts devel team devscripts | = 2.10.13 | No fix listed |
| devscripts devel team devscripts | = 2.10.14 | No fix listed |
| devscripts devel team devscripts | = 2.10.15 | No fix listed |
| devscripts devel team devscripts | = 2.10.16 | No fix listed |
| devscripts devel team devscripts | = 2.10.17 | No fix listed |
| devscripts devel team devscripts | = 2.10.18 | No fix listed |
| devscripts devel team devscripts | = 2.10.18.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.19 | No fix listed |
| devscripts devel team devscripts | = 2.10.20 | No fix listed |
| devscripts devel team devscripts | = 2.10.21 | No fix listed |
| devscripts devel team devscripts | = 2.10.22 | No fix listed |
| devscripts devel team devscripts | = 2.10.23 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| devscripts devel team devscripts | = 2.10.24 | No fix listed |
| devscripts devel team devscripts | = 2.10.25 | No fix listed |
| devscripts devel team devscripts | = 2.10.26 | No fix listed |
| devscripts devel team devscripts | = 2.10.27 | No fix listed |
| devscripts devel team devscripts | = 2.10.28 | No fix listed |
| devscripts devel team devscripts | = 2.10.29 | No fix listed |
| devscripts devel team devscripts | = 2.10.30 | No fix listed |
| devscripts devel team devscripts | = 2.10.31 | No fix listed |
| devscripts devel team devscripts | = 2.10.32 | No fix listed |
| devscripts devel team devscripts | = 2.10.33 | No fix listed |
| devscripts devel team devscripts | = 2.10.34 | No fix listed |
| devscripts devel team devscripts | = 2.10.35 | No fix listed |
| devscripts devel team devscripts | = 2.10.36 | No fix listed |
| devscripts devel team devscripts | = 2.10.38 | No fix listed |
| devscripts devel team devscripts | = 2.10.39 | No fix listed |
| devscripts devel team devscripts | = 2.10.40 | No fix listed |
| devscripts devel team devscripts | = 2.10.41 | No fix listed |
| devscripts devel team devscripts | = 2.10.42 | No fix listed |
| devscripts devel team devscripts | = 2.10.43 | No fix listed |
| devscripts devel team devscripts | = 2.10.44 | No fix listed |
| devscripts devel team devscripts | = 2.10.45 | No fix listed |
| devscripts devel team devscripts | = 2.10.46 | No fix listed |
| devscripts devel team devscripts | = 2.10.47 | No fix listed |
| devscripts devel team devscripts | = 2.10.48 | No fix listed |
| devscripts devel team devscripts | = 2.10.49 | No fix listed |
| devscripts devel team devscripts | = 2.10.50 | No fix listed |
| devscripts devel team devscripts | = 2.10.51 | No fix listed |
| devscripts devel team devscripts | = 2.10.52 | No fix listed |
| devscripts devel team devscripts | = 2.10.53 | No fix listed |
| devscripts devel team devscripts | = 2.10.54 | No fix listed |
| devscripts devel team devscripts | = 2.10.55 | No fix listed |
| devscripts devel team devscripts | = 2.10.56 | No fix listed |
| devscripts devel team devscripts | = 2.10.57 | No fix listed |
| devscripts devel team devscripts | = 2.10.58 | No fix listed |
| devscripts devel team devscripts | = 2.10.59 | No fix listed |
| devscripts devel team devscripts | = 2.10.60 | No fix listed |
| devscripts devel team devscripts | = 2.10.61 | No fix listed |
| devscripts devel team devscripts | = 2.10.62 | No fix listed |
| devscripts devel team devscripts | = 2.10.63 | No fix listed |
| devscripts devel team devscripts | = 2.10.64 | No fix listed |
| devscripts devel team devscripts | = 2.10.65.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.66 | No fix listed |
| devscripts devel team devscripts | = 2.10.67 | No fix listed |
| devscripts devel team devscripts | = 2.10.68 | No fix listed |
| devscripts devel team devscripts | = 2.11.0 | No fix listed |
| devscripts devel team devscripts | = 2.11.1 | No fix listed |
| devscripts devel team devscripts | = 2.11.2 | No fix listed |
| devscripts devel team devscripts | = 2.11.3 | No fix listed |
References
- Debian Security Tracker CVE-2012-0211 vendor-advisory
- anonscm.debian.org
- anonscm.debian.org
- 47955 third-party-advisory vendor-advisory
- 48039 third-party-advisory vendor-advisory
- USN-1366-1 vendor-advisory
- DSA-2409 vendor-advisory
- 79320 vdb-entry
- 52029 vdb-entry
- devscripts-commands-code-execution(73216) vdb-entry