Devscripts Devel Team
Devscripts Devel Team Devscripts: vulnerabilidades y CVE
Devscripts Devel Team Devscripts tiene 14 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2015-5704 | Alta (7.8) | 0.53% | — | 25 sept 2017 | scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands. |
| CVE-2015-5705 | Alta (7.5) | 3.1% | — | 6 sept 2017 | Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename. |
| CVE-2014-1833 | Media (5) | 3.7% | — | 5 feb 2014 | Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink. |
| CVE-2013-6888 | Alta (7.5) | 4.1% | — | 7 ene 2014 | Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball. |
| CVE-2013-7085 | Media (5.8) | 2.5% | — | 14 dic 2013 | Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename. |
| CVE-2013-7050 | Media (6.8) | 1.9% | — | 13 dic 2013 | The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name. |
| CVE-2012-3500 | Baja (1.2) | 0.27% | — | 1 oct 2012 | scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error… |
| CVE-2012-2242 | Media (6.8) | 1.7% | — | 1 oct 2012 | scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped,… |
| CVE-2012-2241 | Media (5) | 1.5% | — | 1 oct 2012 | scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename. |
| CVE-2012-2240 | Alta (7.5) | 3.2% | — | 1 oct 2012 | scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands." |
| CVE-2012-0212 | Alta (9.3) | 5.8% | — | 16 jun 2012 | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument. |
| CVE-2012-0211 | Alta (9.3) | 5.8% | — | 16 jun 2012 | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball… |
| CVE-2012-0210 | Alta (9.3) | 5.3% | — | 16 jun 2012 | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file. |
| CVE-2009-2946 | Alta (9.3) | 2.9% | — | 4 sept 2009 | Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian… |