Skip to content
OpenAdvisories
Unscored DSA-2836-1 2 CVEs

devscripts - arbitrary code execution

Published Jan 5, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 devscripts 2.12.6+deb7u2

Vulnerabilities 2

  • Unscored —

    Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

  • Unscored —

    An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code v…