CVE-2012-0211
N/A
Published: June 16, 2012 at 12:00 AM UTC
Updated: June 16, 2026 at 11:36 PM UTC
1 product affected across 1 vendorDevscripts
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%
Description
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.10.02.10.12.10.102.10.112.10.122.10.132.10.142.10.152.10.162.10.172.10.182.10.18.12.10.192.10.202.10.212.10.222.10.232.10.242.10.252.10.262.10.272.10.282.10.292.10.32.10.302.10.312.10.322.10.332.10.342.10.352.10.362.10.382.10.392.10.402.10.412.10.422.10.432.10.442.10.452.10.462.10.472.10.482.10.492.10.502.10.512.10.522.10.532.10.542.10.552.10.562.10.572.10.582.10.592.10.62.10.602.10.612.10.622.10.632.10.642.10.65.12.10.662.10.672.10.682.10.72.10.82.10.92.11.02.11.12.11.22.11.3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (9)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/47955Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/48039Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2012/dsa-2409Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card