PatchTheCVEdevscripts devel team vulnerabilities
Recent CVEs affecting devscripts devel team products. 10 tracked.
devscripts devel team has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2017-09-25. Highest priority: CVE-2015-5705 (score 58/100).
- CVE-2015-5705 HIGH 7.5 UPGRADE MITIGATE Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary fil
- CVE-2015-5704 HIGH 7.8 UPGRADE MITIGATE scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
- CVE-2014-1833 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary
- CVE-2013-7085 MEDIUM 5.8 DOWNGRADE Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files
- CVE-2013-7050 MEDIUM 6.8 UPGRADE The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION,
- CVE-2013-6888 HIGH 7.5 UPGRADE Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
- CVE-2012-3500 LOW 1.2 UPGRADE scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users
- CVE-2012-2242 MEDIUM 6.8 UPGRADE scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a craft
- CVE-2012-2241 MEDIUM 5.0 UPGRADE scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1
- CVE-2012-2240 HIGH 7.5 UPGRADE scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via uns
FAQ
How do I fix devscripts devel team vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is devscripts devel team being exploited right now?
None of the tracked devscripts devel team CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which devscripts devel team CVE should I patch first?
CVE-2015-5705 currently ranks highest (58/100): Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary fil.