CVE-2015-0860 Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary...
HighCVSS 7.5
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dpkg(Debian:12) | < 1.18.4 | 1.18.4 |
| debian/dpkg(Debian:13) | < 1.18.4 | 1.18.4 |
| debian/dpkg(Debian:14) | < 1.18.4 | 1.18.4 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| debian/dpkg | = 1.16.0 | No fix listed |
| debian/dpkg | = 1.16.0.1 | No fix listed |
| debian/dpkg | = 1.16.0.2 | No fix listed |
| debian/dpkg | = 1.16.0.3 | No fix listed |
| debian/dpkg | = 1.16.1 | No fix listed |
| debian/dpkg | = 1.16.1.1 | No fix listed |
| debian/dpkg | = 1.16.1.2 | No fix listed |
| debian/dpkg | = 1.16.2 | No fix listed |
| debian/dpkg | = 1.16.3 | No fix listed |
| debian/dpkg | = 1.16.4 | No fix listed |
| debian/dpkg | = 1.16.4.1 | No fix listed |
| debian/dpkg | = 1.16.4.2 | No fix listed |
| debian/dpkg | = 1.16.4.3 | No fix listed |
| debian/dpkg | = 1.16.5 | No fix listed |
| debian/dpkg | = 1.16.6 | No fix listed |
| debian/dpkg | = 1.16.7 | No fix listed |
| debian/dpkg | = 1.16.8 | No fix listed |
| debian/dpkg | = 1.16.9 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dpkg | = 1.16.10 | No fix listed |
| debian/dpkg | = 1.16.11 | No fix listed |
| debian/dpkg | = 1.16.12 | No fix listed |
| debian/dpkg | = 1.16.15 | No fix listed |
| debian/dpkg | = 1.17.0 | No fix listed |
| debian/dpkg | = 1.17.1 | No fix listed |
| debian/dpkg | = 1.17.2 | No fix listed |
| debian/dpkg | = 1.17.3 | No fix listed |
| debian/dpkg | = 1.17.4 | No fix listed |
| debian/dpkg | = 1.17.5 | No fix listed |
| debian/dpkg | = 1.17.6 | No fix listed |
| debian/dpkg | = 1.17.7 | No fix listed |
| debian/dpkg | = 1.17.8 | No fix listed |
| debian/dpkg | = 1.17.9 | No fix listed |
| debian/dpkg | = 1.17.10 | No fix listed |
| debian/dpkg | = 1.17.11 | No fix listed |
| debian/dpkg | = 1.17.12 | No fix listed |
| debian/dpkg | = 1.17.13 | No fix listed |
| debian/dpkg | = 1.17.14 | No fix listed |
| debian/dpkg | = 1.17.15 | No fix listed |
| debian/dpkg | = 1.17.16 | No fix listed |
| debian/dpkg | = 1.17.17 | No fix listed |
| debian/dpkg | = 1.17.18 | No fix listed |
| debian/dpkg | = 1.17.19 | No fix listed |
| debian/dpkg | = 1.17.20 | No fix listed |
| debian/dpkg | = 1.17.21 | No fix listed |
| debian/dpkg | = 1.17.22 | No fix listed |
| debian/dpkg | = 1.17.23 | No fix listed |
| debian/dpkg | = 1.17.24 | No fix listed |
| debian/dpkg | = 1.17.25 | No fix listed |
References
- Debian Security Tracker CVE-2015-0860 vendor-advisory
- DSA-3407 vendor-advisory
- USN-2820-1 vendor-advisory
- anonscm.debian.org
- blog.fuzzing-project.org
- bugs.debian.org
- GLSA-201612-07 vendor-advisory