CVE-2014-8625
Severity
6.8MEDIUM
EPSS
2.5%
top 14.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 20
Latest updateMay 17
Description
Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) package or (2) architecture name.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages2 packages
🔴Vulnerability Details
3GHSA▶
GHSA-rg28-4v7w-vh73: Multiple format string vulnerabilities in the parse_error_msg function in parsehelp↗2022-05-17
CVEList▶
CVE-2014-8625: Multiple format string vulnerabilities in the parse_error_msg function in parsehelp↗2015-01-20
OSV▶
CVE-2014-8625: Multiple format string vulnerabilities in the parse_error_msg function in parsehelp↗2015-01-20
📋Vendor Advisories
1Debian▶
CVE-2014-8625: dpkg - Multiple format string vulnerabilities in the parse_error_msg function in parseh...↗2014