Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and…

Description

Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.

Scores

EPSS (exploitation in 30 days)

5.0% · top 7.8% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a
• CWE-189 (opens in a new tab)All about CWE-189 and its CVEs

Affected products

• n/a

  • affected n/a

References (6)

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798324 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://anonscm.debian.org/cgit/dpkg/dpkg.git/commit/dpkg-deb/extract.c?id=e65aa3db04eb908c9507d5d356a95cedb890814d (opens in a new tab)x_refsource_CONFIRMx_transferred
• GLSA-201612-07 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• DSA-3407 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• https://blog.fuzzing-project.org/30-Stack-overflows-and-out-of-bounds-read-in-dpkg-Debian.html (opens in a new tab)x_refsource_MISCx_transferred
• USN-2820-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2015-0860](https://trackcve.app/badge/CVE-2015-0860.svg)](https://trackcve.app/cve/CVE-2015-0860)

Record last updated 6 Aug 2024, 04:26 UTC.