CVE-2012-0211
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers...
CVE-2012-0211 is a high vulnerability (CVSS 9.3) in Devscripts Devel Team Devscripts, published February 15, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.75%, the 93rd percentile. Fixed in devscripts 2.11.4.
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
Exploit likelihood
What each source reports
NVD Score used
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
- Record
CVE-2012-0211- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
- Record
CVE-2012-0211- Updated
- 2026-11-02
EUVDEUVD-2012-0249 No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
- Record
EUVD-2012-0249- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hwmp-fjcm-wrhx No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers...
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
- Record
GHSA-hwmp-fjcm-wrhx- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
- Record
CVE-2012-0211- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0211 No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.
- Record
DEBIAN-CVE-2012-0211- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
devscriptsDebian:12 |
before 2.11.4 | 2.11.4 |
devscriptsDebian:13 |
before 2.11.4 | 2.11.4 |
devscriptsDebian:14 |
before 2.11.4 | 2.11.4 |
devscriptsDebian:6.0 |
before 2.10.69+squeeze2, plus listed versions 2.10.692.10.69+squeeze1 |
2.10.69+squeeze2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
anonscm.debian.org/gitweb?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03
secunia.com/advisories/47955
securityfocus.com/bid/52029
ubuntu.com/usn/usn-1366-1
exchange.xforce.ibmcloud.com/vulnerabilities/73216
Show 8 moreShow less
osvdb.org/79320
debian.org/security/2012/dsa-2409
nvd.nist.gov/vuln/detail/CVE-2012-0211
github.com/advisories/GHSA-hwmp-fjcm-wrhx
security-tracker.debian.org/tracker/CVE-2012-0211