Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.
2015-12-03T20:59:01.847
2025-04-12T10:46:40.837
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | canonical | ubuntu_linux | 12.04 | Yes |
| Operating System | canonical | ubuntu_linux | 14.04 | Yes |
| Operating System | canonical | ubuntu_linux | 15.04 | Yes |
| Operating System | canonical | ubuntu_linux | 15.10 | Yes |
| Application | debian | dpkg | 1.16.0 | Yes |
| Application | debian | dpkg | 1.16.0.1 | Yes |
| Application | debian | dpkg | 1.16.0.2 | Yes |
| Application | debian | dpkg | 1.16.0.3 | Yes |
| Application | debian | dpkg | 1.16.1 | Yes |
| Application | debian | dpkg | 1.16.1.1 | Yes |
| Application | debian | dpkg | 1.16.1.2 | Yes |
| Application | debian | dpkg | 1.16.2 | Yes |
| Application | debian | dpkg | 1.16.3 | Yes |
| Application | debian | dpkg | 1.16.4 | Yes |
| Application | debian | dpkg | 1.16.4.1 | Yes |
| Application | debian | dpkg | 1.16.4.2 | Yes |
| Application | debian | dpkg | 1.16.4.3 | Yes |
| Application | debian | dpkg | 1.16.5 | Yes |
| Application | debian | dpkg | 1.16.6 | Yes |
| Application | debian | dpkg | 1.16.7 | Yes |
| Application | debian | dpkg | 1.16.8 | Yes |
| Application | debian | dpkg | 1.16.9 | Yes |
| Application | debian | dpkg | 1.16.10 | Yes |
| Application | debian | dpkg | 1.16.11 | Yes |
| Application | debian | dpkg | 1.16.12 | Yes |
| Application | debian | dpkg | 1.16.15 | Yes |
| Application | debian | dpkg | 1.17.0 | Yes |
| Application | debian | dpkg | 1.17.1 | Yes |
| Application | debian | dpkg | 1.17.2 | Yes |
| Application | debian | dpkg | 1.17.3 | Yes |
| Application | debian | dpkg | 1.17.4 | Yes |
| Application | debian | dpkg | 1.17.5 | Yes |
| Application | debian | dpkg | 1.17.6 | Yes |
| Application | debian | dpkg | 1.17.7 | Yes |
| Application | debian | dpkg | 1.17.8 | Yes |
| Application | debian | dpkg | 1.17.9 | Yes |
| Application | debian | dpkg | 1.17.10 | Yes |
| Application | debian | dpkg | 1.17.11 | Yes |
| Application | debian | dpkg | 1.17.12 | Yes |
| Application | debian | dpkg | 1.17.13 | Yes |
| Application | debian | dpkg | 1.17.14 | Yes |
| Application | debian | dpkg | 1.17.15 | Yes |
| Application | debian | dpkg | 1.17.16 | Yes |
| Application | debian | dpkg | 1.17.17 | Yes |
| Application | debian | dpkg | 1.17.18 | Yes |
| Application | debian | dpkg | 1.17.19 | Yes |
| Application | debian | dpkg | 1.17.20 | Yes |
| Application | debian | dpkg | 1.17.21 | Yes |
| Application | debian | dpkg | 1.17.22 | Yes |
| Application | debian | dpkg | 1.17.23 | Yes |
| Application | debian | dpkg | 1.17.24 | Yes |
| Application | debian | dpkg | 1.17.25 | Yes |