Vulnerability CVE-2015-0860 - CERT Civis.Net

Vulnerability Name:

CVE-2015-0860 (CCN-109318)

Assigned:

2015-01-07

Published:

2015-01-07

Updated:

2017-07-01

Summary:

Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.

CVSS v3 Severity:

9.8 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2015-0860

Source: DEBIAN
Type: Vendor Advisory
DSA-3407

Source: UBUNTU
Type: UNKNOWN
USN-2820-1

Source: CONFIRM
Type: UNKNOWN
https://anonscm.debian.org/cgit/dpkg/dpkg.git/commit/dpkg-deb/extract.c?id=e65aa3db04eb908c9507d5d356a95cedb890814d

Source: MISC
Type: UNKNOWN
https://blog.fuzzing-project.org/30-Stack-overflows-and-out-of-bounds-read-in-dpkg-Debian.html

Source: CCN
Type: Debian Bug report logs - 798324
dpkg-deb: Fix off-by-one write access on versionbuf variable

Source: CONFIRM
Type: UNKNOWN
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798324

Source: XF
Type: UNKNOWN
debian-dpkg-cve20150860-bo(109318)

Source: GENTOO
Type: UNKNOWN
GLSA-201612-07

Vulnerable Configuration:

Configuration 1:

cpe:/o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

OR cpe:/o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:debian:dpkg:1.16.0:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.0.1:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.0.2:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.0.3:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.1:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.1.1:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.1.2:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.2:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.3:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.4:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.4.1:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.4.2:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.4.3:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.5:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.6:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.7:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.8:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.9:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.10:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.11:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.12:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.16.15:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.0:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.1:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.2:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.3:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.4:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.5:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.6:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.7:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.8:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.9:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.10:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.11:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.12:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.13:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.14:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.15:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.16:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.17:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.18:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.19:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.20:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.21:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.22:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.23:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.24:*:*:*:*:*:*:*

OR cpe:/a:debian:dpkg:1.17.25:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:debian:dpkg:1.17.25:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20150860	V	CVE-2015-0860	2022-05-20
oval:org.opensuse.security:def:42154	P	Security update for permissions (Moderate)	2021-12-28
oval:org.opensuse.security:def:57158	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:55954	P	Security update for python-urllib3 (Moderate)	2021-09-29
oval:org.opensuse.security:def:57077	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-08-25
oval:org.opensuse.security:def:14727	P	perl-32bit-5.18.2-12.17.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13884	P	libXxf86dga1-1.1.4-3.58 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14065	P	xlockmore-5.43-5.30 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14749	P	python-pywbem-0.7.0-4.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13903	P	libgoa-1_0-0-3.20.4-7.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14076	P	aaa_base-13.2+git20140911.61c1681-36.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13820	P	fontconfig-2.11.1-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13996	P	pam-1.1.8-14.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14089	P	audiofile-0.3.6-10.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:13867	P	libQt5WebKit5-5.6.1-9.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14021	P	qemu-2.6.1-27.15 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:11107	P	Security update for chromium (Important)	2021-07-21
oval:org.opensuse.security:def:42103	P	Security update for containerd (Moderate)	2021-07-20
oval:org.opensuse.security:def:56035	P	Security update for java-1_8_0-openjdk (Moderate)	2021-06-15
oval:org.opensuse.security:def:19515	P	Security update for csync2 (Moderate)	2021-06-10
oval:org.opensuse.security:def:12012	P	rtkit-0.11_git201205151338-8.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12694	P	pigz-2.3-5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11743	P	xen-4.5.1_12-2.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11870	P	libXxf86vm1-1.1.3-3.54 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:13730	P	sudo-1.8.10p3-1.62 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11290	P	ecryptfs-utils-103-5.35 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12021	P	sysconfig-0.84.0-13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11789	P	dhcp-4.3.3-9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11945	P	libsqlite3-0-3.8.10.2-3.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:13752	P	xf86-video-intel-2.99.914-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11928	P	libpoppler44-0.24.4-12.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11713	P	rsync-3.1.0-2.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12034	P	w3m-0.5.3-157.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11836	P	imobiledevice-tools-1.2.0-7.31 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11970	P	mailx-12.5-28.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11268	P	bind-libs-32bit-9.9.5P1-1.10 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11950	P	libtag1-1.9.1-1.265 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12672	P	openconnect-7.08-1.27 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:13722	P	shim-0.9-2.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11721	P	strongswan-5.1.3-18.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11851	P	libQt5Concurrent5-5.6.1-11.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11277	P	cpp48-4.8.3+r212056-6.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:56028	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:11226	P	Security update for chromium (Important)	2021-06-04
oval:org.opensuse.security:def:42074	P	Security update for libxml2 (Important)	2021-05-19
oval:org.opensuse.security:def:11201	P	Security update for irssi (Moderate)	2021-04-23
oval:org.opensuse.security:def:41913	P	Security update for xorg-x11-server (Important)	2021-04-13
oval:org.opensuse.security:def:56965	P	Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:38429	P	Security update for python-Jinja2 (Important)	2021-02-25
oval:org.opensuse.security:def:57039	P	Security update for postgresql, postgresql12, postgresql13 (Important)	2021-01-26
oval:org.opensuse.security:def:11126	P	Security update for vlc (Important)	2021-01-20
oval:org.opensuse.security:def:41977	P	kdebase3-runtime-3.5.10-20.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42029	P	openvpn-2.0.9-143.31 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:54678	P	Security update for python-setuptools (Important)	2020-12-02
oval:org.opensuse.security:def:37741	P	bash on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38120	P	alsa on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41202	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:41566	P	Security update for java-1_8_0-ibm (Moderate)	2020-12-01
oval:org.opensuse.security:def:19507	P	Security update for libXfont (Important)	2020-12-01
oval:org.opensuse.security:def:56765	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:20005	P	Security update for libvirt (Important)	2020-12-01
oval:org.opensuse.security:def:11045	P	libplist++-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54597	P	libraw9 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38517	P	xdg-utils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39269	P	Security update for SLES 12-SP1 Docker image (Important)	2020-12-01
oval:org.opensuse.security:def:42792	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:55634	P	Security update for LibVNCServer (Moderate)	2020-12-01
oval:org.opensuse.security:def:19694	P	Security update for ecryptfs-utils (Moderate)	2020-12-01
oval:org.opensuse.security:def:19911	P	Security update for the Linux Kernel (Live Patch 26 for SLE 12) (Important)	2020-12-01
oval:org.opensuse.security:def:10969	P	libXt-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53555	P	Security update for gnutls (Moderate)	2020-12-01
oval:org.opensuse.security:def:54285	P	libmpfr4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37825	P	jakarta-taglibs-standard on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38210	P	gstreamer-plugins-good on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41213	P	Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:41635	P	Security update for wget (Moderate)	2020-12-01
oval:org.opensuse.security:def:55635	P	Security update for sblim-sfcb (Moderate)	2020-12-01
oval:org.opensuse.security:def:56208	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:56873	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:20643	P	Security update for freeradius-server (Important)	2020-12-01
oval:org.opensuse.security:def:53154	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:11092	P	libxmltooling-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38545	P	apache2-mod_jk on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:42837	P	Security update for dpkg (Moderate)	2020-12-01
oval:org.opensuse.security:def:19728	P	Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:57656	P	Security update for xscreensaver (Moderate)	2020-12-01
oval:org.opensuse.security:def:53155	P	Security update for python-pip (Moderate)	2020-12-01
oval:org.opensuse.security:def:53728	P	Security update for python-pip (Important)	2020-12-01
oval:org.opensuse.security:def:54393	P	tigervnc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37962	P	libspice-client-glib-2_0-8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38370	P	libsolv-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41305	P	Security update for sqlite3 (Important)	2020-12-01
oval:org.opensuse.security:def:41737	P	Security update for git (Moderate)	2020-12-01
oval:org.opensuse.security:def:55657	P	Security update for rsync (Moderate)	2020-12-01
oval:org.opensuse.security:def:56314	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:19969	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12) (Important)	2020-12-01
oval:org.opensuse.security:def:20669	P	Security update for dpkg (Moderate)	2020-12-01
oval:org.opensuse.security:def:10977	P	libapr1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54485	P	gpg2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37729	P	apache2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38589	P	evince on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:19550	P	Security update for strongswan (Moderate)	2020-12-01
oval:org.opensuse.security:def:19766	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:53177	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:53834	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:37730	P	apache2-mod_apparmor on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38063	P	shim on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41457	P	Security update for apache-commons-httpclient (Important)	2020-12-01
oval:org.opensuse.security:def:55797	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:56480	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:19981	P	Security update for ucode-intel (Moderate)	2020-12-01
oval:org.opensuse.security:def:10999	P	libgme-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54559	P	libjavascriptcoregtk-1_0-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38478	P	sane-backends on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:39227	P	python3-requests on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:41201	P	Security update for java-1_7_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:19636	P	Security update for dracut (Moderate)	2020-12-01
oval:org.opensuse.security:def:19878	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:53317	P	Security update for postgresql10 and postgresql12 (Moderate)	2020-12-01
oval:org.opensuse.security:def:54000	P	libXfixes3-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:78662	P	Security update for dpkg (Moderate)	2017-04-24
oval:org.cisecurity:def:276	P	DSA-3407-1 dpkg -- security update	2016-02-08
oval:com.ubuntu.precise:def:20150860000	V	CVE-2015-0860 on Ubuntu 12.04 LTS (precise) - medium.	2015-12-03
oval:com.ubuntu.trusty:def:20150860000	V	CVE-2015-0860 on Ubuntu 14.04 LTS (trusty) - medium.	2015-12-03