CVE-2015-5705
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to...
CVE-2015-5705 is a high vulnerability (CVSS 7.5) in Devscripts Devel Team Devscripts, published September 6, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 88th percentile. Fixed in devscripts 2.15.8.
- Severity
- 7.5 HighCVSS 3.0, NVD
- Exploit chance
- 3.12%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.15.8devscripts +2 more
Description
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
devscriptsDebian:12 | before 2.15.8 | 2.15.8 |
devscriptsDebian:13 | before 2.15.8 | 2.15.8 |
devscriptsDebian:14 | before 2.15.8 | 2.15.8 |
What each source reports
NVD Score used
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
- Record
CVE-2015-5705- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
- Record
CVE-2015-5705- Updated
- 2026-11-02
EUVDEUVD-2015-5652No score
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
- Record
EUVD-2015-5652- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qhpv-f2h3-4mh8
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to...
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
- Record
GHSA-qhpv-f2h3-4mh8- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
OSV
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
- Record
CVE-2015-5705- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-5705
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
- Record
DEBIAN-CVE-2015-5705- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
anonscm.debian.org/cgit/collab-maint/devscripts.git/commit?id=d8f8fa1d8e4151fa62997cb74403f97ab0d7e1a2
bugzilla.redhat.com/show_bug.cgi?id=1249645
lists.fedoraproject.org/pipermail/package-announce/2015-August/163710.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=794260
openwall.com/lists/oss-security/2015/08/01/7
nvd.nist.gov/vuln/detail/CVE-2015-5705
github.com/advisories/GHSA-qhpv-f2h3-4mh8
security-tracker.debian.org/tracker/CVE-2015-5705