devscripts_devel_team Vulnerabilities

Browse the latest common vulnerabilities and exposures (CVEs) related to devscripts_devel_team. Use this page to track security alerts, assess risk scores, and find automated remediation steps for devscripts_devel_team products. Stay ahead of zero-day exploits and ensure your systems are patched against known threats.

Total Vulnerabilities

Critical Issues

Average CVSS Score

7.0

Search Results

Showing 1-14 of 14 vulnerabilities

Sort (this page):

Default order is newest first across all pages. Manual sort buttons apply within the current page.

CVE-2015-5704

HIGH

scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.

Score: 7.8•Published: 9/25/2017

Affected:

devscripts devel team/devscripts

(+2)

7.8

CVE-2015-5705

HIGH

Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.

Score: 7.5•Published: 9/6/2017

Affected:

devscripts devel team/devscripts

(+2)

7.5

CVE-2014-1833

UNKNOWN

Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.

Score: 5•Published: 2/5/2014

Affected:

devscripts devel team/devscripts

5.0

CVE-2013-6888

UNKNOWN

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

Score: 7.5•Published: 1/7/2014

Affected:

devscripts devel team/devscripts

(+8)

7.5

CVE-2013-7085

UNKNOWN

Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.

Score: 5.8•Published: 12/14/2013

Affected:

devscripts devel team/devscripts

5.8

CVE-2013-7050

UNKNOWN

The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.

Score: 6.8•Published: 12/13/2013

Affected:

devscripts devel team/devscripts

(+7)

6.8

CVE-2012-3500

UNKNOWN

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.

Score: 1.2•Published: 10/1/2012

Affected:

devscripts devel team/devscripts

(+1)

1.2

CVE-2012-2242

UNKNOWN

scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240.

Score: 6.8•Published: 10/1/2012

Affected:

devscripts devel team/devscripts

(+73)

6.8

CVE-2012-2241

UNKNOWN

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

Score: 5•Published: 10/1/2012

Affected:

devscripts devel team/devscripts

(+90)

5.0

CVE-2012-2240

UNKNOWN

scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."

Score: 7.5•Published: 10/1/2012

Affected:

devscripts devel team/devscripts

(+90)

7.5

CVE-2012-0212

UNKNOWN

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.

Score: 9.3•Published: 6/16/2012

Affected:

devscripts devel team/devscripts

(+69)

9.3

CVE-2012-0211

UNKNOWN

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.

Score: 9.3•Published: 6/16/2012

Affected:

devscripts devel team/devscripts

(+69)

9.3

CVE-2012-0210

UNKNOWN

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.

Score: 9.3•Published: 6/16/2012

Affected:

devscripts devel team/devscripts

(+69)

9.3

CVE-2009-2946

UNKNOWN

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

Score: 9.3•Published: 9/4/2009

Affected:

devscripts devel team/devscripts

9.3