Skip to content
OpenAdvisories
Unscored USN-2242-1 2 CVEs

dpkg vulnerabilities

Published Jun 10, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that dpkg incorrectly handled certain patches when
unpacking source packages. If a user or an automated system were tricked
into unpacking a specially crafted source package, a remote attacker could
modify files outside the target unpack directory, leading to a denial of
service or potentially gaining access to the system.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS dpkg 1.17.5ubuntu5.3

Vulnerabilities 2

  • Unscored —
    CVE-2014-3864

    Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of t…

    dpkg dpkg Debian Ubuntu
  • Unscored —
    CVE-2014-3865 Public exploit

    Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files ou…

    dpkg dpkg Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3864
  • report
    https://ubuntu.com/security/CVE-2014-3865