Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 3 products
[457845680] Vulnerability: CVE-2022-1664 affecting GitOnBorg::chromium::chromium::src http://crbug.com/457845680
Post summary
The entry lists CVE-2022-1664 affecting GitOnBorg Chromium code and links to the Chromium bug tracker for more details, but provides no further technical or exploit information.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 11.0 | - | - |
| OS | debian | debian_linux | 9.0 | - | - |
| App | debian | dpkg | - | - | - |
| App | netapp | ontap_select_deploy_administration_utility | - | - | - |