7.5

CVE-2012-2240: devscripts_devel_team devscripts Improper Input Validation

CVSS: 7.5v2.0HighModified
AliasesDEBIAN-CVE-2012-2240
Published 01-10-2012Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2012-2240 is a high (CVSS 7.5) Improper Input Validation vulnerability in devscripts_devel_team devscripts. EPSS estimates a 3.15% chance of exploitation in the next 30 days, higher than 87.7% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v2.0 (NVD)
EPSS score
3.15%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1
DSA-2549-1

Timeline

  1. 01-10-2012
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

3.15%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.15% on 19-09-2026

19-09-202619-10-2026
EPSS score
3.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • devscripts< 2.12.3
Devscripts_devel_team1 product
  • devscripts≤ 2.12.2 | 2.7.0 | 2.8.14 | 2.9.21 | 2.9.22 | 2.9.23 | 2.9.24 | 2.9.25 | 2.9.26:etch1 | 2.9.26:etch2 | 2.9.26:etch4 | 2.9.26:etch5 | 2.9.27 | 2.10.0 | 2.10.1 | 2.10.3 | 2.10.6 | 2.10.7 | 2.10.8 | 2.10.9 | 2.10.10 | 2.10.11 | 2.10.12 | 2.10.13 | 2.10.14 | 2.10.15 | 2.10.16 | 2.10.17 | 2.10.18 | 2.10.18.1 | 2.10.19 | 2.10.20 | 2.10.21 | 2.10.22 | 2.10.23 | 2.10.24 | 2.10.25 | 2.10.26 | 2.10.27 | 2.10.28 | 2.10.29 | 2.10.30 | 2.10.31 | 2.10.32 | 2.10.33 | 2.10.34 | 2.10.35 | 2.10.36 | 2.10.38 | 2.10.39 | 2.10.40 | 2.10.41 | 2.10.42 | 2.10.43 | 2.10.44 | 2.10.45 | 2.10.46 | 2.10.47 | 2.10.48 | 2.10.49 | 2.10.50 | 2.10.51 | 2.10.52 | 2.10.53 | 2.10.54 | 2.10.55 | 2.10.56 | 2.10.57 | 2.10.58 | 2.10.59 | 2.10.60 | 2.10.61 | 2.10.62 | 2.10.63 | 2.10.64 | 2.10.65.1 | 2.10.66 | 2.10.67 | 2.10.68 | 2.11.0 | 2.11.1 | 2.11.2 | 2.11.3 | 2.11.4 | 2.11.5 | 2.11.6 | 2.11.7 | 2.11.8 | 2.11.9 | 2.12.0 | 2.12.1

2 vendors · 2 products

References

5 links