CVE-2014-0471
N/A
Published: April 30, 2014 at 02:00 PM UTC
Updated: June 17, 2026 at 12:03 AM UTC
2 products affected across 2 vendorsUbuntu LinuxDpkg
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.15.8.81.101.10.11.10.111.10.121.10.131.10.141.10.151.10.161.10.171.10.181.10.18.11.10.191.10.21.10.201.10.211.10.221.10.231.10.241.10.251.10.261.10.271.10.281.10.31.10.41.10.51.10.61.10.71.10.81.10.91.13.01.13.11.13.101.13.111.13.11.11.13.121.13.131.13.141.13.151.13.161.13.171.13.181.13.191.13.21.13.201.13.211.13.221.13.231.13.241.13.251.13.31.13.41.13.51.13.61.13.71.13.81.13.91.14.01.14.11.14.101.14.111.14.121.14.131.14.141.14.151.14.161.14.16.11.14.16.21.14.16.31.14.16.41.14.16.51.14.16.61.14.171.14.181.14.191.14.21.14.201.14.211.14.221.14.231.14.241.14.251.14.261.14.271.14.281.14.291.14.31.14.301.14.41.14.51.14.61.14.71.14.81.14.91.15.01.15.11.15.21.15.31.15.3.11.15.41.15.4.11.15.51.15.5.11.15.5.21.15.5.31.15.5.41.15.5.51.15.5.61.15.61.15.6.11.15.71.15.7.11.15.7.21.15.81.15.8.11.15.8.21.15.8.31.15.8.41.15.8.51.15.8.61.15.8.71.15.8.91.16.01.16.0.11.16.0.21.16.0.31.16.11.16.1.11.16.1.21.16.101.16.111.16.121.16.21.16.31.16.41.16.4.11.16.4.21.16.4.31.16.51.16.61.16.71.16.81.16.91.17.01.17.11.17.21.17.31.17.41.17.51.17.61.17.71.9.11.9.101.9.111.9.121.9.131.9.141.9.151.9.161.9.171.9.181.9.191.9.21.9.201.9.211.9.31.9.71.9.81.9.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (3)
Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2014/dsa-2915Quick Info
StatusMODIFIED
CWE
CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card