CVE-2022-1664
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-1664
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1664.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-1664
- Related
- Published
- 2022-05-26T14:15:08Z
- Modified
- 2024-12-05T15:32:40.354254Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
- References
-
- https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=1f23dddc17f69c9598477098c7fb9936e15fa495
- https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=58814cacee39c4ce9e2cd0e3a3b9b57ad437eff5
- https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=7a6c03cb34d4a09f35df2f10779cbf1b70a5200b
- https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=faa4c92debe45412bfcf8a44f26e827800bb24be
- https://lists.debian.org/debian-lts-announce/2022/05/msg00033.html
- https://lists.debian.org/debian-security-announce/2022/msg00115.html
- https://security.netapp.com/advisory/ntap-20221007-0002/
- https://security.alpinelinux.org/vuln/CVE-2022-1664
- https://security-tracker.debian.org/tracker/CVE-2022-1664
Affected packages
Alpine:v3.13 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.20.10-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
Alpine:v3.14 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.20.10-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
Alpine:v3.15 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.20.10-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
Alpine:v3.16 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.21.8-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
1.21.1-r0
1.21.1-r1
1.21.2-r0
1.21.3-r0
1.21.6-r0
1.21.7-r0
Alpine:v3.17 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.21.8-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
1.21.1-r0
1.21.1-r1
1.21.2-r0
1.21.3-r0
1.21.6-r0
1.21.7-r0
Alpine:v3.18 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.21.8-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
1.21.1-r0
1.21.1-r1
1.21.2-r0
1.21.3-r0
1.21.6-r0
1.21.7-r0
Alpine:v3.19 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.21.8-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
1.21.1-r0
1.21.1-r1
1.21.2-r0
1.21.3-r0
1.21.6-r0
1.21.7-r0
Alpine:v3.20 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.21.8-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
1.21.1-r0
1.21.1-r1
1.21.2-r0
1.21.3-r0
1.21.6-r0
1.21.7-r0
Alpine:v3.21 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:apk/alpine/dpkg?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.21.8-r0
Affected versions
1.*
1.15.5.6-r0
1.15.5.6-r1
1.15.5.6-r2
1.15.8.10-r0
1.16.0.3-r0
1.16.8-r0
1.16.10-r0
1.16.10-r1
1.16.10-r2
1.16.12-r0
1.16.14-r0
1.16.15-r1
1.18.3-r0
1.18.4-r0
1.18.4-r1
1.18.7-r0
1.18.7-r1
1.18.9-r0
1.18.9-r1
1.18.10-r0
1.18.23-r0
1.18.23-r1
1.18.23-r2
1.18.24-r0
1.19.2-r0
1.19.2-r1
1.19.5-r0
1.19.6-r0
1.19.7-r0
1.19.7-r1
1.20.0-r0
1.20.1-r0
1.20.2-r0
1.20.3-r0
1.20.4-r0
1.20.5-r0
1.20.5-r1
1.20.5-r2
1.20.5-r3
1.20.6-r0
1.20.7.1-r0
1.20.9-r0
1.21.1-r0
1.21.1-r1
1.21.2-r0
1.21.3-r0
1.21.6-r0
1.21.7-r0
Debian:11 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:deb/debian/dpkg?arch=source
Debian:12 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:deb/debian/dpkg?arch=source
Debian:13 / dpkg
Package
- Name
- dpkg
- Purl
- pkg:deb/debian/dpkg?arch=source
Git / git.dpkg.org/cgit/dpkg/dpkg.git
Affected ranges
- Type
- GIT
- Repo
- https://git.dpkg.org/cgit/dpkg/dpkg.git
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed1f23dddc17f69c9598477098c7fb9936e15fa495Fixed58814cacee39c4ce9e2cd0e3a3b9b57ad437eff5Fixed7a6c03cb34d4a09f35df2f10779cbf1b70a5200bFixedfaa4c92debe45412bfcf8a44f26e827800bb24be
Affected versions
1.*
1.1.4
1.1.5
1.1.6
1.10
1.10.1
1.10.10
1.10.11
1.10.12
1.10.13
1.10.14
1.10.15
1.10.16
1.10.17
1.10.18
1.10.18.1
1.10.19
1.10.2
1.10.20
1.10.21
1.10.22
1.10.23
1.10.24
1.10.25
1.10.26
1.10.27
1.10.28
1.10.3
1.10.4
1.10.5
1.10.6
1.10.7
1.10.8
1.10.9
1.13.1.0.1
1.13.10
1.13.11
1.13.11.1
1.13.12
1.13.13
1.13.14
1.13.15
1.13.16
1.13.17
1.13.18
1.13.19
1.13.2
1.13.20
1.13.21
1.13.22
1.13.23
1.13.24
1.13.25
1.13.3
1.13.4
1.13.5
1.13.6
1.13.7
1.13.8
1.13.9
1.14.0
1.14.1
1.14.10
1.14.11
1.14.12
1.14.13
1.14.14
1.14.15
1.14.16
1.14.16.1
1.14.16.2
1.14.16.3
1.14.16.4
1.14.16.5
1.14.16.6
1.14.17
1.14.18
1.14.19
1.14.2
1.14.20
1.14.21
1.14.22
1.14.23
1.14.24
1.14.25
1.14.3
1.14.4
1.14.5
1.14.6
1.14.7
1.14.7_newshlib
1.14.7_newshlib.1
1.14.8
1.14.8_newshlib
1.14.9
1.15.0
1.15.1
1.15.2
1.15.3
1.15.3.1
1.15.4
1.15.4.1
1.15.5
1.15.5.1
1.15.5.2
1.15.5.3
1.15.5.4
1.15.5.5
1.15.5.6
1.15.6
1.15.6.1
1.15.7
1.15.7.1
1.15.7.2
1.15.8
1.15.8.1
1.15.8.10
1.15.8.2
1.15.8.3
1.15.8.4
1.15.8.5
1.15.8.6
1.15.8.7
1.15.8.8
1.15.8.9
1.16.0
1.16.0.1
1.16.0.2
1.16.0.3
1.16.1
1.16.1.1
1.16.1.2
1.16.10
1.16.2
1.16.3
1.16.4
1.16.4.1
1.16.4.2
1.16.4.3
1.16.5
1.16.6
1.16.7
1.16.8
1.16.9
1.17.0
1.17.1
1.17.10
1.17.11
1.17.12
1.17.13
1.17.14
1.17.15
1.17.16
1.17.17
1.17.18
1.17.19
1.17.2
1.17.20
1.17.21
1.17.22
1.17.23
1.17.3
1.17.4
1.17.5
1.17.6
1.17.7
1.17.8
1.17.9
1.18.0
1.18.1
1.18.10
1.18.11
1.18.12
1.18.13
1.18.14
1.18.15
1.18.16
1.18.17
1.18.18
1.18.19
1.18.2
1.18.20
1.18.21
1.18.22
1.18.23
1.18.24
1.18.25
1.18.3
1.18.4
1.18.5
1.18.6
1.18.7
1.18.8
1.18.9
1.19.0
1.19.1
1.19.2
1.19.3
1.19.4
1.19.5
1.19.6
1.19.7
1.2.0
1.2.1
1.2.10
1.2.11
1.2.12
1.2.13
1.2.14
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.20.0
1.20.1
1.20.2
1.20.3
1.20.4
1.20.5
1.20.6
1.20.7
1.20.8
1.20.9
1.21.0
1.21.1
1.21.2
1.21.3
1.21.4
1.21.5
1.21.6
1.21.7
1.3.0
1.3.1
1.3.10
1.3.11
1.3.12
1.3.13
1.3.14
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1.1
1.4.1.10
1.4.1.11
1.4.1.12
1.4.1.14
1.4.1.15
1.4.1.17
1.4.1.19
1.4.1.4
1.4.1.5
1.4.1.7
1.4.1.8
1.4.1.9
1.6
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.7.0
1.7.1