NVD

Id
35627  
Name
CVE-2014-8625  
Description
Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package or (2) architecture name.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-20  
Modified Date
2017-01-02  
Seq
2014-8625  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182356 35627 CVE-2014-8625 FEDORA-2015-6974  View
182357 35627 CVE-2014-8625 [oss-security] 20141106 CVE-Request: dpkg handling of "control" and warnings format string vulnerability  View
182358 35627 CVE-2014-8625 [oss-security] 20141106 Re: CVE-Request: dpkg handling of "control" and warnings format string vulnerability  View
182359 35627 CVE-2014-8625 [oss-security] 20141106 Re: CVE-Request: dpkg handling of "control" and warnings format string vulnerability  View
182360 35627 CVE-2014-8625 dpkg-format-sting(98551)  View
182361 35627 CVE-2014-8625 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768485  View
182362 35627 CVE-2014-8625 https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/1389135  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18861 JVNDB-2014-007736 dpkg の parsehelp.c の parse_error_msg 関数におけるフォーマットストリングの脆弱性 dpkg の parsehelp.c の parse_error_msg 関数には、フォーマットストリングの脆弱性が存在します。 CVE-2014-8625 75918 CVE-2014-8625 35627 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007736.html 2014-11-07 2015-01-23 View