CVE-2012-0212
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers...
CVE-2012-0212 is a high vulnerability (CVSS 9.3) in Devscripts Devel Team Devscripts, published February 15, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.75%, the 93rd percentile. Fixed in devscripts 2.11.4.
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
Exploit likelihood
What each source reports
NVD Score used
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
- Record
CVE-2012-0212- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
- Record
CVE-2012-0212- Updated
- 2026-11-02
EUVDEUVD-2012-0250 No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
- Record
EUVD-2012-0250- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qmmg-7772-cxg7 No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers...
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
- Record
GHSA-qmmg-7772-cxg7- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
- Record
CVE-2012-0212- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0212 No score
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
- Record
DEBIAN-CVE-2012-0212- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
devscriptsDebian:12 |
before 2.11.4 | 2.11.4 |
devscriptsDebian:13 |
before 2.11.4 | 2.11.4 |
devscriptsDebian:14 |
before 2.11.4 | 2.11.4 |
devscriptsDebian:6.0 |
before 2.10.69+squeeze2, plus listed versions 2.10.692.10.69+squeeze1 |
2.10.69+squeeze2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
anonscm.debian.org/gitweb?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03
secunia.com/advisories/47955
securityfocus.com/bid/52029
osvdb.org/79322
ubuntu.com/usn/usn-1366-1
Show 7 moreShow less
ubuntu.com/usn/USN-1593-1
exchange.xforce.ibmcloud.com/vulnerabilities/73217
debian.org/security/2012/dsa-2409
nvd.nist.gov/vuln/detail/CVE-2012-0212
github.com/advisories/GHSA-qmmg-7772-cxg7
security-tracker.debian.org/tracker/CVE-2012-0212