5

CVE-2012-2241: devscripts_devel_team devscripts Improper Input Validation

CVSS: 5.0v2.0MediumModified
AliasesDEBIAN-CVE-2012-2241
Published 01-10-2012Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2012-2241 is a medium (CVSS 5.0) Improper Input Validation vulnerability in devscripts_devel_team devscripts. EPSS estimates a 1.50% chance of exploitation in the next 30 days, higher than 74% of scored vulnerabilities.

Overall risk
20/100
0100
Low · default modelHow is this calculated?
CVSS score
5.0/10
010
Medium · v2.0 (NVD)
EPSS score
1.50%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1
DSA-2549-1

Timeline

  1. 01-10-2012
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.50%

Chance of exploitation in the next 30 days

Percentile

74%

Versus all other CVEs

30-day change

0.00 pp

From 1.50% on 20-09-2026

20-09-202620-10-2026
EPSS score
1.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • devscripts< 2.12.3
Devscripts_devel_team1 product
  • devscripts≤ 2.12.2 | 2.7.0 | 2.8.14 | 2.9.21 | 2.9.22 | 2.9.23 | 2.9.24 | 2.9.25 | 2.9.26:etch1 | 2.9.26:etch2 | 2.9.26:etch4 | 2.9.26:etch5 | 2.9.27 | 2.10.0 | 2.10.1 | 2.10.3 | 2.10.6 | 2.10.7 | 2.10.8 | 2.10.9 | 2.10.10 | 2.10.11 | 2.10.12 | 2.10.13 | 2.10.14 | 2.10.15 | 2.10.16 | 2.10.17 | 2.10.18 | 2.10.18.1 | 2.10.19 | 2.10.20 | 2.10.21 | 2.10.22 | 2.10.23 | 2.10.24 | 2.10.25 | 2.10.26 | 2.10.27 | 2.10.28 | 2.10.29 | 2.10.30 | 2.10.31 | 2.10.32 | 2.10.33 | 2.10.34 | 2.10.35 | 2.10.36 | 2.10.38 | 2.10.39 | 2.10.40 | 2.10.41 | 2.10.42 | 2.10.43 | 2.10.44 | 2.10.45 | 2.10.46 | 2.10.47 | 2.10.48 | 2.10.49 | 2.10.50 | 2.10.51 | 2.10.52 | 2.10.53 | 2.10.54 | 2.10.55 | 2.10.56 | 2.10.57 | 2.10.58 | 2.10.59 | 2.10.60 | 2.10.61 | 2.10.62 | 2.10.63 | 2.10.64 | 2.10.65.1 | 2.10.66 | 2.10.67 | 2.10.68 | 2.11.0 | 2.11.1 | 2.11.2 | 2.11.3 | 2.11.4 | 2.11.5 | 2.11.6 | 2.11.7 | 2.11.8 | 2.11.9 | 2.12.0 | 2.12.1

2 vendors · 2 products

References

7 links